5 Commits

Author	SHA1	Message	Date
Hugh Brown	84a5d8677e	docs: update security.md to reflect current gateway token behavior ... The has_token redaction was reverted to avoid a frontend breaking change. Update docs to match: tokens are currently returned in API responses, redaction is planned for a future PR. Also note the configurable payload size limit. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-07 23:35:10 +05:30
Hugh Brown	acd1526acf	docs: update api.md to reflect require_user_or_agent rename ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-07 23:35:10 +05:30
Hugh Brown	149fde90c4	docs: document security hardening changes from security review ... Add documentation for all user/operator-facing changes introduced by the security review branch: rate limits, security headers, webhook HMAC verification, payload size limits, gateway token redaction, non-root containers, agent token logging, and prompt injection mitigation. Updated: docs/reference/api.md, docs/reference/authentication.md, docs/reference/configuration.md, docs/deployment/README.md, docs/operations/README.md, docs/openclaw_gateway_ws.md, backend/README.md. Created: docs/reference/security.md (consolidated security reference). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-07 23:35:10 +05:30
Abhimanyu Saharan	32e8855404	docs(api): document auth, request ids, errors, examples	2026-03-03 05:04:42 +05:30
Abhimanyu Saharan	1fdacec7c1	docs: add initial docs/ information architecture + stubs	2026-03-03 05:04:42 +05:30