2 commits

Author	SHA1	Message	Date
oliver	6eeaa457b8	Default UME TLS verify off for lab self-signed certs. ... Restore ume_verify_tls=false so onsite UME login works without a .env override; production should set NETX_UME_VERIFY_TLS=true or pin a CA. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-06 15:15:48 +08:00
oliver	633a9d55bd	Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets. ... Add capability RBAC, Alembic bootstrap, optional worker schedulers, and close public docs by default so lab installs stay usable without shared signing keys. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:24:34 +08:00