| .. |
| audit-2026-06-30-fixes.md | docs: note that P1-1's original mkdir-based lock was superseded | 4 months ago |
| audit-2026-08-27.md | docs: record process-group identity protection and shutdown grace | 2 months ago |
| browser-runtime.md | fix(browser): preserve config and isolate bounded health probes | 2 months ago |
| dependency-audit-2026-08-27.md | docs: record hosted validation and correct release origin notes | 2 months ago |
| docker-architecture.md | docs: correct credential isolation and token lifetime claims | 2 months ago |
| future-go-port.md | refactor: dedupe MCP handshake between box and guest/hb, note deferred Go rewrite | 4 months ago |
| host-mounts.md | fix: harden mount apply/persist ordering and detection edge cases | 4 months ago |
| nexus-operations.md | feat: native installers, Vite+-managed node, IP-based list URLs | 4 months ago |
| security-model.md | docs: record review followups and bounded snapshot retries | 2 months ago |
| tailscale-executor.md | feat: support Tailscale HTTPS executor access | 4 months ago |
| tx9-cli-design.md | docs: record audit fixes, evidence, and remaining trust decisions | 2 months ago |
| usage-guide.html | fix: address native installer review findings | 4 months ago |