9 Commits

Include renames

Author	SHA1	Message	Date
harald	f9733dfc73	fix(storage): S-06 — container advisory lock prevents parallel mount and concurrent writes	2026-09-19 09:05:12 +02:00
harald	9634beb744	fix(sync): S-05 — delete and shred all chunks when truncating to 0 bytes	2026-09-19 08:59:00 +02:00
harald	f557a9ddfa	fix(sync): S-04 — eliminate TOCTOU by recording actual bytes written	2026-09-19 08:57:34 +02:00
harald	888c86ca5e	fix(sync): S-03 — symlink detection and cycle protection	2026-09-19 08:56:43 +02:00
harald	7b0f061221	fix(sync): S-02 — platform-independent path construction avoids path traversal	2026-09-19 01:01:09 +02:00
harald	374150e5b3	fix(sync): S-01 — excluded paths no longer deleted by --delete	2026-09-19 00:12:14 +02:00
harald	fba7f305e3	release: v0.7.2 — Security Audit Remediation (SA-01 bis SA-07) ... - SA-01: Container-DoS / KDF-Amplification Schutz mit Pre-KDF Validierung, max 2 Slots (nur 0 und 1), Slot 0 Pflicht und strikten BLOB-Laengen - SA-02: Release-Signierung in CI entkoppelt (getrennte build und sign-and-release Jobs, Secret-Isolation) - SA-03: Pinned Download-Integritaet fuer minisign.exe in CI via SHA-256 - SA-04: Immutable Action-Pinning (@sha) und Toolchain-Pinning (1.85.0) in CI - SA-05: Session-Token vollstaendig aus URIs verbannt (403 Forbidden bei Vorkommen im Pfad/Query) - SA-06: Constant-Time Token- und Auth-Vergleiche via subtle::ConstantTimeEq - SA-07: Dokumentations-Klarstellung bzgl. logischem Shredding vs. physischer SSD/FTL/CoW-Persistenz	2026-09-18 23:40:35 +02:00
harald	436790abf0	feat(security): release v0.7.0 with comprehensive security hardening (S-01 to S-11)	2026-09-18 19:12:43 +02:00
harald	aa65d96434	feat(sync): add rsync-like sync command with dry-run and bump version to v0.5.0	2026-09-16 10:40:38 +02:00