D6 / R-138: every stored Cloudflare token checked once (operator present), all 4 PASS; R-138 closed
gates / gates (push) Successful in 4m35s

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
This commit is contained in:
2026-10-09 09:00:05 +02:00
parent 53ec983849
commit ff27a107c8
5 changed files with 14 additions and 5 deletions
@@ -0,0 +1,7 @@
== D6 / R-138 2026-10-09T06:58:26Z: the hub's own check (GET /zones?per_page=50, exactly one zone and it IS the customer's domain), run READ-ONLY against every STORED token; nothing saved. Tokens never printed.
Tester-2 domain=sajatfelhom.hu zones=1 ['sajatfelhom.hu'] -> PASS
demo-felhom domain=demo-felhom.eu zones=1 ['demo-felhom.eu'] -> PASS
demo-hp domain=enkisfelhom.hu zones=1 ['enkisfelhom.hu'] -> PASS
tester-1 domain=enkicsifelhom.hu zones=1 ['enkicsifelhom.hu'] -> PASS
negative control: a made-up token -> HTTP 403 -> would be COULD NOT CHECK / refused (the check can fail)
hub DB copies (they hold the tokens) deleted from the scratchpad 2026-10-09T06:58:37Z