2 Commits

Author	SHA1	Message	Date
Matt	0baca41693	audit: Tier 0 quick wins — EMAIL_REDIRECT_TO prod guard + storage routing + metadata masking ... Tier 0.2: src/lib/env.ts now refuses boot when NODE_ENV=production AND EMAIL_REDIRECT_TO is set. Sendmail logs the rewrite at warn (was debug) so dev/staging windows where someone forgets to unset are immediately visible. Tier 0.6: backup_jobs.storage_path added to TABLES_WITH_STORAGE_KEYS in src/lib/storage/migrate.ts. Flipping the storage backend used to silently orphan every pg_dump artefact — last-resort recovery path is now actually portable. Tier 1.7: createAuditLog now runs metadata through maskSensitiveFields (was only applied to old/new value diffs). Portal-auth, crm-invite, hard-delete and email-accounts services were writing raw emails into this column unbounded. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-12 17:02:10 +02:00
Matt	a7b72801be	audit: importance-grouped triage companion to AUDIT-2026-05-12.md ... 10 tiers, every finding cross-referenced. Tier 0 = stop-ship, 8 = already-fixed, 9 = nice-to-haves. Pick a tier and dig. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-12 16:58:51 +02:00