mathiasandClaude Opus 5.5 a9a9eebe26 feat(brain-mcp): audit-log every tools/call with principal and scope ...

brain_query and brain_read left no record of who read what; only capture
and governance edits reached the audit sink (OWASP MCP08).

One slog record per call: tool, principal, origin (static/jwt/unknown),
wing/hall when given, outcome, duration. Content is reduced to
content_bytes so the audit line never copies brain content.

Refs #144

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-01 20:44:21 +02:00

..

cmd

feat(server): say at startup when alerting is unconfigured (#107) (#140)

2026-09-23 13:02:40 +00:00

internal

feat(brain-mcp): audit-log every tools/call with principal and scope

2026-10-01 20:44:21 +02:00

Dockerfile

fix(ci): allow ingestion Dockerfile to fetch internal gitea modules

2026-05-22 12:12:09 +02:00

go.mod

feat(webhook): trigger brain-sync on Gitea push instead of 15-min poll

2026-07-07 22:00:56 +02:00

go.sum

feat(webhook): trigger brain-sync on Gitea push instead of 15-min poll

2026-07-07 22:00:56 +02:00