Approval Command Center
repo: ~/Projects/approval-command-center · 11 commits · 0 in last 24h, 0 in last 7d ·
Skills used
- /reject1
- /nav-agent1
- /command-center1
- /no-hard-gate1
- /header1
Creative ideas + design notes
Commits with substantial prose (≥120 chars) — the rationale behind each move.
72c3664 · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
7c6158f · 2026-08-13 · ACC: RETIRE as superseded duplicate of live approvals-viewer (DTD unanimous, TK-10525)
DTD panel voted RETIRE 6/6 (Codex/Grok/Kimi/Claude + 2 subagents; Qwen abstain).
ACC is a dormant port-9795 duplicate of the live approvals.agentabrams.com surface.
Archived via tag archived/2026-08-13-superseded-by-approvals-viewer (nothing deleted).
RETIRED.md documents the one real gap (bulk approve/reject) + the revive path, per
the contrarian's condition. nav-agent code fix (c39f11f) preserved in history.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
c39f11f · 2026-08-13 · ACC: serve public/ static assets so /nav-agent/* resolves (was 404)
Raw Node http server only served index.html at /; the injected nav-agent
<link>/<script> 404'd. Added a path-traversal-guarded GET static handler for
public/ before the 404 fallback (mirrors the approvals-viewer 528c44e fix).
Additive + reversible; asset stays behind Basic auth (verified 200 js/css on a
scratch port, 404 on traversal, 401 unauth).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
4781118 · 2026-08-10 · viewer: add reversible fast-track tray (Approve all N) + per-card risk-reason line
- fast-track tray above the grid batches the reversible/no-hard-gate items
with an 'Approve all N reversible' button (bulk-enqueue, still drained by
the live pass — never fires from this page)
- every card now shows a one-line, gate-derived risk reason (⚠ hard / ✓ soft),
incl. the 'reversible but hard-gated → still officer-only' nuance
- corrected hardcoded 105 -> 109 in title/header to match the real digest
Per DTD verdict B + contrarian's highest-leverage fix.
File tree
8 files tracked. Click any to browse the source at HEAD.
rendered in 0ms