admin
a791aae057
gates / gates (push) Successful in 1s
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
983 B
983 B
REPORT — 2026-09-28 evening: no app goes live with a login a stranger knows (decision 45) — the audit and the first two apps
Architecture: 09-update-architecture.md §3 decision 45 (new); 01-topology-and-trust.md links the audit.
| app | before | route | proof (9202, fresh install, controller 0.279.0) | live |
|---|---|---|---|---|
| claper | seeds admin@claper.co / claper (measured: authenticates) | bin/claper rpc update_user_password |
default fails · generated works · wrong fails · restore keeps it | 9dc8a05 |
| bookstack | admin@admin.com / password (measured, also on demo-hp) | artisan bookstack:create-admin --initial |
default fails · generated works · wrong fails | this commit |
| calibre-web | admin / admin123 (measured, also on demo-hp) | cps.py -s refuses an alphanumeric password |
— | open: needs a special-character generator |
The full table: FIRST-ADMIN.md. Evidence: felhom.eu/documentation/audits/logins-nvme-2026-09-28/B/.