3 Commits

Include renames

Author	SHA1	Message	Date
Matthew Meszaros	78ec522758	feat: challenge a sign-in that could not physically be the same person, which a remembered device cannot catch because an attacker holding the cookie looks familiar: sign-ins were only ever a Redis device fingerprint with a TTL, so nothing durable recorded WHERE an account was used and there was nothing to compare a new one against; login_history keeps a bounded window per user, the geo lookup gains the coordinates the city database already had, and a journey implying more than 1000 km/h forces the emailed code even on a known device; it declines to judge a first sign-in, a hop under 500 km, an interval under two minutes or a missing position, because a false challenge locks a real person out of their own account and that is the worse failure, and repeated anomalies inside a fortnight reach the workspace posture while one odd trip does not	2026-08-28 12:08:17 -07:00
Matthew Meszaros	2430095197	feat: move infrastructure state off dynamodb ... Remove DynamoDB-backed storage paths, add Postgres/HTTP repositories for mailbox state maps, wire the internal message-map API, and add provisioning runner/migration plumbing.	2026-06-02 15:54:12 +02:00
Matthew Meszaros	772c19820d	New Repository: Add Backend Code	2026-01-17 14:11:14 +00:00