10 Commits

Author	SHA1	Message	Date
Jesse_Chen	754505d40a	fix(admin): preserve revoked owners and 503 status ... Owner recovery lived in the identity-only migration path and could clear historical revocations on conflict. Admin layout also rethrew authorization 503s, turning service-unavailable failures into 500 responses.\n\nMove recovery behind the RBAC migration sequence, exclude revoked candidates without mutating their history, and terminate layout redirects at a no-store 503 route.	2026-08-07 11:33:48 +08:00
Jesse_Chen	0d7e5a26d5	fix(admin): break denied-session redirect loop ... Preserve 403/503 responses instead of redirecting them through the Caddy root, and recover Owner only for the sole loginable synced identity admin.	2026-08-07 11:06:13 +08:00
Jesse_Chen	6457c836fa	feat(admin): add RBAC identity and MFA controls	2026-08-06 20:15:08 +08:00
Jesse	82dab96b07	feat(report): add personal report contract and persistence	2026-08-06 12:43:10 +08:00
Jesse	02ec5db361	feat(admin): add audited Refine staging console	2026-07-28 09:47:13 +08:00
Jesse_Chen	a1b8eaec36	feat(staging): switch to local postgres	2026-07-22 11:04:36 +08:00
Jesse_Chen	5da3dd38ff	feat(identity): add local postgres identity schema	2026-07-21 17:52:25 +08:00
Jesse_Chen	9e119df977	fix: keep staging control plane on main	2026-07-21 07:45:14 +08:00
Jesse_Chen	53d9aaf846	fix: enforce postgres least privilege	2026-07-21 07:45:14 +08:00
Jesse_Chen	69b38ee6ed	feat: add reviewed postgres migration foundation	2026-07-21 07:45:14 +08:00