Files
felhom.eu/documentation/audits/day-2026-10-18/P1/access-log-live-test.txt
T
admin 88aecf55b6
gates / gates (push) Successful in 7m23s
Installer step 4b: vault first, then set, then a PVE login (R-1145); host key off curl's argv (review F4); harness green and a gate (R-1146); hub 0.158.0 deploy evidence; independent review + verdicts
Live on demo-hp (--rotate-recovery-only): vault time moved, new value 200, old 401. Harness 52/0;
the R1145 cases fail against HEAD. Publishes only with the next installer tag.
2026-10-18 12:50:49 +02:00

13 lines
654 B
Plaintext

== live redaction test 2026-10-18T10:28:49Z: a fresh fake token (48 hex) sent in a query, a /bind/ path, a session query, a Bearer header, a Cookie, a POST body
lines in today's file: 15
the fake token in the log: 0
control (log + the token appended): 1
secret shapes (Bearer value, 32+ hex/base64 run, password=, token=, session=): 0
control for the shapes on the appended copy: 1
== my test lines (path fields only):
GET /healthz 200 cred=- auth=-
GET /bind/[redacted] 200 cred=- auth=-
GET /configuration 302 cred=- auth=-
POST /login 401 cred=- auth=-
== distinct box sources of /api/v1/report: xff=192.168.0.101 xff=192.168.0.149 xff=192.168.0.155