ccantynz/Gluecron.com
CodeIssuesPull RequestsActionsSecurityInsights
✨ AI
Understand
Explain codebaseAsk AIChat with repoClaude sessionsNL searchSemantic searchArchaeologyDebt mapDocs tracking
Build
Spec to PRWorkspaceGenerate testsPropose migrationDev environmentCodebase migrator
Ship
Preview URLsAI release notesAI changelog
More
Repository
CommitsBranchesTagsReleasesPackagesSymbolsStale branches
Planning
MilestonesProjectsDiscussionsWikiContributors
Delivery
GatesMerge queueMerge checksDeploymentsPipelineAgents
Activity
Health reportPulsePush log
Settings

feat(email): role addresses are real — security.txt published, placeholders removed, From default fixed #5554

MergedXSccantynz wants to mergefeat/real-email-addresses→mainopened 5d ago
ccantynzcommented 5d ago

The owner created the role mailboxes (security@, support@, notify@, postmaster@, abuse@, dmarc@ — aliased to a monitored inbox). This wires the code side:

  • RFC 9116 security.txt at /.well-known/security.txt + root fallback — Contact: security@gluecron.com, rolling ~6-month Expires computed at render so it can never quietly go stale. No Policy: line (it would have pointed at a nonexistent page); SECURITY.md carries scope and ground rules. The admin-security CC7.1 disclosure check flips green with an accurate description.
  • Legal pages lose "(placeholder)" on support@ — the address exists now. The entity-name DRAFT placeholder deliberately stays: the legal entity is still on the owner's standing list.
  • EMAIL_FROM default becomes gluecron <notify@gluecron.com>, replacing the unroutable no-reply@gluecron.local that real mail servers would reject the moment the Vapron rail is wired. notify@ over no-reply@: replies to a password-reset mail are occasionally humans in trouble.

Typecheck clean; seo/legal/email suites 87 pass; design gate green.

ccantynzAI Reviewcommented 5d ago

AI Triage

(no summary)

Priority: medium Risk area: mixed

Suggested labels: (no label suggestions) Suggested reviewers: (no reviewer suggestions)

Suggestions only — nothing has been applied. The PR author stays in control.

gluecron[bot]🤖 botAI Reviewcommented 5d ago

AI review unavailable

The platform's AI balance is exhausted, so AI generation is temporarily unavailable. Nothing was lost. You can queue this as a repair for the internal agent from the repository's Health page, or try again once the balance is restored. The PR is otherwise unchanged.

Cross-repo impact

See what breaks downstream if this PR merges.

Analyze →
⮌ Merged

This pull request was merged into main.

c comment · e edit title · m merge · a approve · r request changes · ? shortcuts