Issues - breakpilot-compliance - Gitea: Git with a cup of tea

Benjamin_Boenisch/breakpilot-compliance

Labels Milestones New Issue

Lock down IPFS dsms-node: close external port 5001 and add auth to dsms-gateway security severity: medium

#26 opened 2026-04-20 09:37:51 +00:00 by sharang M5: Frontend Hardening

Add error boundaries to all SDK route pages frontend reliability severity: medium

#25 opened 2026-04-20 09:37:48 +00:00 by sharang M5: Frontend Hardening

Move auth tokens from localStorage to httpOnly cookies frontend security severity: medium

#24 opened 2026-04-20 09:37:44 +00:00 by sharang M5: Frontend Hardening

Improve Go SDK test coverage: audit trail and LLM fallback paths severity: medium testing

#23 opened 2026-04-20 09:37:18 +00:00 by sharang M4: Testing & Contract Stability

Establish API versioning and pagination response standard data-integrity severity: medium

#22 opened 2026-04-20 09:37:17 +00:00 by sharang M4: Testing & Contract Stability

Add transaction rollback tests for multi-step write operations data-integrity severity: medium testing

#21 opened 2026-04-20 09:37:14 +00:00 by sharang M4: Testing & Contract Stability

Write auth integration tests — verify 401/403 on every protected route security severity: high testing

#20 opened 2026-04-20 09:37:12 +00:00 by sharang M4: Testing & Contract Stability

Write tenant isolation integration tests security severity: high testing

#19 opened 2026-04-20 09:37:11 +00:00 by sharang M4: Testing & Contract Stability

Stop leaking internal error details to API clients observability security severity: medium

#18 opened 2026-04-20 09:36:33 +00:00 by sharang M3: Observability & Audit Logging

Improve health check endpoints to verify real service connectivity observability reliability severity: medium

#17 opened 2026-04-20 09:36:31 +00:00 by sharang M3: Observability & Audit Logging

Add DSGVO-required audit logging for all data access and mutation routes observability security severity: high

#16 opened 2026-04-20 09:36:29 +00:00 by sharang M3: Observability & Audit Logging

Integrate structlog with tenant_id and request_id context on every request observability severity: medium

#15 opened 2026-04-20 09:36:28 +00:00 by sharang M3: Observability & Audit Logging

Configure SQLAlchemy connection pool for production load config reliability severity: medium

#14 opened 2026-04-20 09:35:52 +00:00 by sharang M2: Data Integrity & Reliability

Cap unbounded list endpoints with mandatory pagination data-integrity severity: medium

#13 opened 2026-04-20 09:35:51 +00:00 by sharang M2: Data Integrity & Reliability

Add missing database indexes on tenant_id, created_at, and release_state data-integrity severity: medium

#12 opened 2026-04-20 09:35:46 +00:00 by sharang M2: Data Integrity & Reliability

Fix silent exception swallowing in route handlers observability reliability severity: high

#11 opened 2026-04-20 09:35:44 +00:00 by sharang M2: Data Integrity & Reliability

Add retry logic and circuit breakers for external service calls reliability severity: high

#10 opened 2026-04-20 09:35:15 +00:00 by sharang M2: Data Integrity & Reliability

Wrap multi-step DB operations in transactions to prevent partial writes data-integrity severity: high

#9 opened 2026-04-20 09:35:10 +00:00 by sharang M2: Data Integrity & Reliability

Fix CORS default: restrict allowed origins from wildcard to explicit list security severity: high

#8 opened 2026-04-20 09:34:50 +00:00 by sharang M1: Security Foundation

Enforce required env vars at startup — eliminate insecure defaults config security severity: high

#7 opened 2026-04-20 09:34:48 +00:00 by sharang M1: Security Foundation

1 2