Security hardening (FAZ 1-3): close confirmed authz defects, secure-by-default + multi-DB CI#102

Merged

emreakay merged 20 commits into

mainfrom

feat/review-agents-and-hardening

Jul 3, 2026

Commits on Jul 3, 2026

chore: add pre-PR review sub-agents + orchestrator

Emre Akay
and
claude
committed
test: add orWhere no-leak security regression test

Emre Akay
and
claude
committed
fix(faz1): non-breaking bug fixes + regression tests

Emre Akay
and
claude
committed
feat(faz2): secure-by-default fixes (no config flags) + tests

Emre Akay
and
claude
committed
ci: multi-DB testing (MariaDB + PostgreSQL) on local, GitHub & GitLab

Emre Akay
and
claude
committed
fix(review): address independent sub-agent audit findings

Emre Akay
and
claude
committed
perf(faz3): audit-recommended non-breaking hardening

Emre Akay
and
claude
committed
docs: fix GitLab CI quality-stage name (php-cs-fixer, not pint)

Emre Akay
and
claude
committed
ci: allow advisory-affected versions in composer resolution

Emre Akay
and
claude
committed
refactor(phpstan): add array/relation/generic type annotations

Emre Akay
and
claude
committed
ci: run the full suite against PostgreSQL in addition to MySQL

Emre Akay
and
claude
committed
fix(phpstan): specify generics on the switchableRoles facade @method

Emre Akay
and
claude
committed
refactor(phpstan): remove excludePaths + broad ignore, shrink baseline 25->8

Emre Akay
and
claude
committed
ci(phpstan): run on PHP 8.3 to match the Laravel 13 lock

Emre Akay
and
claude
committed
refactor(phpstan): remove all 4 inline @phpstan-ignore comments

Emre Akay
and
claude
committed
chore(agent): add LA11 cache-security + LA12 Octane checks to laravel-architect

Emre Akay
and
claude
committed
refactor: remove the persistent cache subsystem; hold auth context per-instance

Emre Akay
and
claude
committed
chore(agent): add LA13 per-request-load + SOLID checks to laravel-architect

Emre Akay
and
claude
committed
docs: remove references to the deleted cache subsystem

Emre Akay
and
claude
committed
docs: modernize README/UPGRADE, drop Laravel Boost guidelines, add AGENTS.md

Emre Akay
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Security hardening (FAZ 1-3): close confirmed authz defects, secure-by-default + multi-DB CI#102

Security hardening (FAZ 1-3): close confirmed authz defects, secure-by-default + multi-DB CI#102
emreakay merged 20 commits into
mainfrom
feat/review-agents-and-hardening

Commits on Jul 3, 2026

chore: add pre-PR review sub-agents + orchestrator

test: add orWhere no-leak security regression test

fix(faz1): non-breaking bug fixes + regression tests

feat(faz2): secure-by-default fixes (no config flags) + tests

ci: multi-DB testing (MariaDB + PostgreSQL) on local, GitHub & GitLab

fix(review): address independent sub-agent audit findings

perf(faz3): audit-recommended non-breaking hardening

docs: fix GitLab CI quality-stage name (php-cs-fixer, not pint)

ci: allow advisory-affected versions in composer resolution

refactor(phpstan): add array/relation/generic type annotations

ci: run the full suite against PostgreSQL in addition to MySQL

fix(phpstan): specify generics on the switchableRoles facade @method

refactor(phpstan): remove excludePaths + broad ignore, shrink baseline 25->8

ci(phpstan): run on PHP 8.3 to match the Laravel 13 lock

refactor(phpstan): remove all 4 inline @phpstan-ignore comments

chore(agent): add LA11 cache-security + LA12 Octane checks to laravel-architect

refactor: remove the persistent cache subsystem; hold auth context per-instance

chore(agent): add LA13 per-request-load + SOLID checks to laravel-architect

docs: remove references to the deleted cache subsystem

docs: modernize README/UPGRADE, drop Laravel Boost guidelines, add AGENTS.md