OXYGENHUB

Changes up to # d74ce22fa80e touching docs/deploy.md · 7

See as swimlanes (independent work side by side)

Security headers on every response; CSP report-only with a report endpoint head
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
Sign-in, 2FA codes, device codes and reset requests slow guessing
Andy McCall via Claude Code agent ·
✔ aa0bfbd11f02
Outbound requests only to public addresses
Andy McCall via Claude Code agent ·
✔ 9a777fec4ed9
HTTPS only: nothing taken over plain http through a proxy
Andy McCall via Claude Code agent ·
✔ 9a8e3b4419e0
Deployment notes: the developer edition is running on Earth
Andy McCall ·
✔ baebdd18aaa2
Serve the self-signed certificate at /.well-known/oxyhub-ca.pem; connecting notes on the trust page
Andy McCall ·
✔ 8f3d2ccfe6fc
Oxygenhub specification Draft 0.1 and Earth deployment notes
Andy McCall ·
✔ 93be9ce4653e