Hammed Abass e7fb0331b5 fix(security): harden provider ACL, tickets, and local secrets ...

Close high-severity findings from the security review: default-deny blob
gets for unmapped hashes, map collection members for ACL, fail closed on
unknown access modes, require vnd1 tickets only, redact tickets from events,
exclude Android app-data backups, and tighten secret-file creation.

2026-07-13 18:41:43 +02:00

..

vnidrop

fix(security): harden provider ACL, tickets, and local secrets

2026-07-13 18:41:43 +02:00