{"slug":"dw-domain-viewer","total":4,"limit":100,"offset":0,"since":null,"commits":[{"hash":"54a7eaa","date":"2026-08-25 10:48:55 -0700","author":"Steve","subject":"creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)","body":"Fleet inoculation — opening this basic-auth app with credentials in the URL\npoisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves\nnon-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"},{"hash":"7aaf884","date":"2026-07-28 08:17:33 -0700","author":"Steve Abrams","subject":"Add 'Re-check all sites' control — re-probes fleet health, refreshes dots (no restart)","body":""},{"hash":"af1ed5d","date":"2026-07-23 09:58:53 -0700","author":"Steve Abrams","subject":"fleet green pass: certs+443 for 4 vendor landings, 8 dead DNS records retired (undo log), creds unified on new/pitchguard/staged","body":""},{"hash":"c4fe170","date":"2026-07-23 08:06:10 -0700","author":"Steve Abrams","subject":"initial scaffold — DW domain viewer (aa-viewer pattern, 180 CF-sourced subdomains)","body":""}]}