Repository navigation

feat(security): add clerk security audit, fix, and checks - #478

Open

dominic-clerk wants to merge 17 commits into

mainfrom

dc/security-recommendations

Open

feat(security): add clerk security audit, fix, and checks#478
dominic-clerk wants to merge 17 commits into
mainfrom
dc/security-recommendations

Commits on Oct 19, 2026
- feat(security): add clerk security audit, fix, and checks
  
  dominic-clerk
  and
  claude
  committed
  ae4a51e
- fix(security): address review: device-trust id, unknown lockout threshold, unowned instance, variadic completion, e2e guards
  
  dominic-clerk
  and
  claude
  committed
  dee5c4e
- docs(security): drop the catalog provenance note
  
  dominic-clerk
  and
  claude
  committed
  32031a1
- docs(security): backup codes alone do not satisfy mfa
  
  dominic-clerk
  and
  claude
  committed
  dc3a2ee
- docs(security): describe what fix --all applies instead of claiming no user impact
  
  dominic-clerk
  and
  claude
  committed
  c131d15
- feat(security): name the plan-gated checks when production rejects a fix
  
  dominic-clerk
  and
  claude
  committed
  80c93ca
- feat(security): drop --fail-on, --spotlight, and --check
  
  dominic-clerk
  and
  claude
  committed
  8e172dd
- fix(security): drop --spotlight from the post-fix next step
  
  dominic-clerk
  and
  claude
  committed
  857bd05
- refactor(security): unexport module-private helpers
  
  dominic-clerk
  and
  claude
  committed
  98958f4
- feat(security): warn what custom flows must handle before applying a fix
  
  dominic-clerk
  and
  claude
  committed
  9c7f135
- docs(changeset): shorten the security entry
  
  dominic-clerk
  and
  claude
  committed
  857a27c
- refactor(security): drop suggestedPatch and raw values, one fix-command builder
  
  dominic-clerk
  and
  claude
  committed
  1dbca25
- fix(security): close fix selections and plan retries over the projection
  
  dominic-clerk
  and
  claude
  committed
  451bde0
- fix(security): make the passwordless fix safe on its own
  
  dominic-clerk
  and
  claude
  committed
  83bfb3e
- fix(security): gate passwordless detection on used_for_sign_in
  
  dominic-clerk
  and
  claude
  committed
  e71b688
- fix(security): name the decision checks --all skips, drop no-op 402 retries
  
  dominic-clerk
  and
  claude
  committed
  ea04648
- refactor(security): share the OAuth and tier helpers, derive factor values from the catalog
  
  dominic-clerk
  and
  claude
  committed
  4892088

Commits

Commits on Oct 19, 2026