fix(security): wire Guardian secret_key (raise in prod) #1

Merged
jules merged 1 commits from fix/audit-security-blockers into main 2026-06-21 01:15:22 +00:00
Owner

ArcadiaCloud.Guardian had no secret_key for prod — every authed route would fail at deploy. Wire from GUARDIAN_SECRET_KEY, raising when absent in prod. Part of the arcadia ecosystem production-readiness audit (2026-06-20). Adversarially verified; smallest-change fix, no rewrite. Rank 2 blocker.

🤖 Generated with Claude Code

ArcadiaCloud.Guardian had no secret_key for prod — every authed route would fail at deploy. Wire from GUARDIAN_SECRET_KEY, raising when absent in prod. Part of the arcadia ecosystem production-readiness audit (2026-06-20). Adversarially verified; smallest-change fix, no rewrite. Rank 2 blocker. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
jules added 1 commit 2026-06-20 07:55:25 +00:00
ArcadiaCloud.Guardian had no secret_key for prod at all — every authed route
would fail at deploy. Wire it from GUARDIAN_SECRET_KEY, raising when absent in
prod; keep the pinned dev/staging default.

Ecosystem audit 2026-06-20, rank 2 blocker.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
jules merged commit fad93b04d6 into main 2026-06-21 01:15:22 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Arcadia/arcadia-cloud#1
No description provided.