{"slug":"feature-harvest","total":6,"limit":100,"offset":0,"since":null,"commits":[{"hash":"fc03b8f","date":"2026-08-25 10:48:56 -0700","author":"Steve","subject":"creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)","body":"Fleet inoculation — opening this basic-auth app with credentials in the URL\npoisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves\nnon-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"},{"hash":"921f77f","date":"2026-06-26 10:11:47 -0700","author":"Steve","subject":"feature-harvest: add skills + agents as review sources (244+74) + officer-recommendation badges from 7-VP cabinet review","body":""},{"hash":"bd3f8ae","date":"2026-06-26 09:06:56 -0700","author":"Steve","subject":"feature-harvest: handle /favicon.ico (204) — silences console 404; verified via 3-method test suite","body":""},{"hash":"a537317","date":"2026-06-26 09:01:02 -0700","author":"Steve","subject":"feature-harvest: in-UI 'Rebuild thumbnails' button with async job + live progress polling","body":""},{"hash":"71db8fd","date":"2026-06-26 08:56:19 -0700","author":"Steve","subject":"feature-harvest: add static-render preview thumbnails for app items (headless-Chrome screenshots + gradient-poster fallback)","body":""},{"hash":"fae9473","date":"2026-06-26 08:39:31 -0700","author":"Steve","subject":"feature-harvest: interactive DW/WPB review deck over a year of shipped apps + DW-Programming tools","body":""}]}