security: AI agent hardening — rate limiter keys, trusted proxy config, captcha cleanup#1102

Merged

BenjaminMichaelis merged 12 commits into

mainfrom

security/ai-agent-hardening

May 17, 2026

Commits on May 14, 2026

security: fix rate limiter partition key, trusted proxy config, and misleading 429 captcha signal
BenjaminMichaelis
committed
security: improve proxy warning to check resolved IOptions, unify unknown-user keys
BenjaminMichaelis
committed
refactor: narrow sitemap catch clause to InvalidOperationException
BenjaminMichaelis
committed
feat: implement hCaptcha validation on chat endpoints
BenjaminMichaelis
committed
security: harden captcha integration after peer review
BenjaminMichaelis
committed
fix: wait for hCaptcha widget before executing token request
BenjaminMichaelis
committed

Commits on May 15, 2026

Merge origin/main into security/ai-agent-hardening
BenjaminMichaelis
committed

Commits on May 16, 2026

Commits on May 17, 2026