zeekay bc1a9d9c5c security: harden Jube client and add SQL CHECK constraints ...

- Jube client: validate base URL scheme (http/https only) to prevent SSRF
- Jube client: cap response body reads at 5MB to prevent memory exhaustion
- SQL migration 002: add CHECK constraints for all status enums, non-negative
  amounts, step range, and singleton settings
- SQL migration 002: add missing indexes on sessions.status, sessions.pipeline_id,
  envelopes.status, compliance_users.email, applications.email

2026-03-27 17:42:52 -07:00

..

001_initial.sql

feat: consolidate compliance — store, types, jube, rbac, onboarding from broker

2026-03-27 17:31:53 -07:00

002_constraints.sql

security: harden Jube client and add SQL CHECK constraints

2026-03-27 17:42:52 -07:00