Relay updates and security/integrity fixes from full-repo review#22

Merged

erskingardner merged 11 commits into

claude/frosty-volhard-203410

May 21, 2026

Commits on May 21, 2026

Update default and negentropy relay lists

erskingardner
and
claude
committed
Harden HTTP tier: strip article HTML, SSRF guard, constant-time tokens

erskingardner
and
claude
committed
Externalize preview JS and lock CSP to script-src 'self'

erskingardner
and
claude
committed
Bound request work: batch mention profiles, cap them, add request timeout

erskingardner
and
claude
committed
Make the archive write path crash-safe (fix silent event loss)

erskingardner
and
claude
committed
Harden ingest edge cases: seal ratio, torn frames, transient dedupe errors

erskingardner
and
claude
committed
Make ClickHouse indexing self-healing and bounded

erskingardner
and
claude
committed
Verify event id + signature in backfill validation (fix accepted forgeries)

erskingardner
and
claude
committed
Ignore local reviews/ artifacts

erskingardner
and
claude
committed
Add GitHub Actions CI

erskingardner
and
claude
committed
ci: install protobuf-compiler for the pensieve-core build

erskingardner
and
claude
committed