zeekay c4a32298ee security: fix Red team round 2 — EIN masking, Jube HTTPS, body limits, key enforcement ...

- MEDIUM-1: Hide BusinessKYB.EIN from JSON, add EINLast4 computed field
- MEDIUM-2: Default Jube sidecar URL to HTTPS (plaintext requires explicit JUBE_URL)
- MEDIUM-3: Add rbac.AllModules() canonical module list to prevent drift
- MEDIUM-5: Fatal if COMPLIANCE_API_KEY unset — no generated key logging
- HIGH-2: Whitelist PATCH /v1/applications/{id} fields, reject terminal states
- LOW-1: Add 1MB request body size limit middleware to complianced

2026-03-27 17:46:35 -07:00

..

rbac.go

security: fix Red team round 2 — EIN masking, Jube HTTPS, body limits, key enforcement

2026-03-27 17:46:35 -07:00