basquetWi + New ticket
llmmsg-srv MSG-201

Close aro_config auth gap: token-gate POST /aro_config + other privileged hub writes so a forged caller=elazar fails (coder-applog-cc exploited it to flip aro:applog PM). Elazar approved ship.

Backlog high clcoder-llmmsgsrv-cc

Sub-tickets

No sub-tickets.
+ Add sub-ticket

Questions

No questions.

Activity

  • system created · 2026-06-01
    wi cli
  • wi-cli-whey assigned · 2026-06-15
    coder-llmmsgsrv-cc / coder
  • wi-cli-whey assigned · 2026-06-15
    coder-llmmsgsrv-cc / coder
security
2026-06-01
6w ago