procurement-ingest/lambdas/po
Adam Moussa ba7c981907
docs(ses_auth): note CFWS ends abutting tokens
The space inserted for a removed comment means header.d=domain(note)
now reads as "domain" where the old gluing behaviour produced
"domainnote" (rejected). Document in _strip_comments that this
loosening is deliberate and safe -- header.d comes verbatim from a
verified signature's d= tag, so a comment in that position is never
attacker-controlled -- and pin the behaviour with a regression test.

Review follow-up to PR #103; no runtime behaviour change.
2026-07-16 14:58:03 -04:00
..
email_processor docs(ses_auth): note CFWS ends abutting tokens 2026-07-16 14:58:03 -04:00
site_extractor Merge workorder-ingest into unified procurement repo (#22) 2026-05-12 15:21:06 -04:00
web_ui Land safe fixes from 2026-06-17 security sweep (#97) 2026-07-15 20:17:46 -04:00