jacobh2 2acfc34a0e SPEC v0.25: D-126 app gate in NPM; infra README step 4a
Outside the home LAN NPM closes every request without X-Kvitt-App: <key>
(return 444); the LAN check reads $realip_remote_addr (NPM's X-Real-IP
realip makes $remote_addr forgeable) and Let's Encrypt's challenge passes
on the normalised $uri. Block rehearsed in NPM v2.16.0's openresty.
README: step 4a (key, keyed APK, gate, acceptance test), health checks,
stale CARGO_BUILD_JOBS text and owner decisions fixed. HANDOFF as of
2026-10-21.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B
2026-10-21 18:59:51 +02:00
2026-10-19 19:36:54 +02:00
S
Description
No description provided
137 MiB
Languages
Kotlin 58.1%
Rust 27.3%
TypeScript 9.3%
Python 2.9%
Shell 1%
Other 1.4%