Security hardening: tenant isolation, XSS, token storage, sidecar trust#5

Merged

G9000 merged 6 commits intomainfrom

copilot/security-hardening-fastapi-tauri

Mar 15, 2026

Commits on Mar 15, 2026

Initial plan
Copilot
committed
security: harden server DB isolation, desktop XSS, token storage, and sidecar trust

Copilot
and
G9000
committed
test: add security hardening tests for DB isolation, vault, config, and nonce

Copilot
and
G9000
committed
security: use /dev/urandom for nonce generation in Tauri sidecar (code review feedback)

Copilot
and
G9000
committed
fix: address PR review feedback — dependency ordering, nonce via IPC, getrandom, JSON parsing

Copilot
and
G9000
committed
test: add direct require_sqlite_mode dependency unit tests

Copilot
and
G9000
committed