4 Commits

Author	SHA1	Message	Date
Michael Freno	baa216d62c	turbo	2026-05-03 22:45:03 -04:00
Michael Freno	0afdf8b6e8	FRE-4500: Fix security review findings (Critical/High/Medium/Low) ... - Critical #1: Add auth check to ingest endpoints (use request.user.id) - Critical #2: Add IDOR protection on group endpoints (userId ownership) - High #3: Register auth middleware in server.ts (populates request.user) - High #4: Add Fastify schema validation to all route handlers - Medium #5: Add NormalizedAlert/CorrelationGroup models to Prisma schema - Medium #6: Sanitize payload storage in normalizer (depth limit, circular ref) - Low #7: Restrict CORS origins (use CORS_ORIGIN env var) Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-02 16:40:01 -04:00
Michael Freno	fe754761d9	Auto-commit 2026-05-02 09:37	2026-05-02 09:37:30 -04:00
Senior Engineer	03276dde2d	Add cross-service alert correlation system FRE-4500 ... - Unified alert types (AlertSource, AlertCategory, CorrelationStatus, EntityType) - NormalizedAlert and CorrelationGroup Prisma models - AlertNormalizer for all 4 services (DarkWatch, SpamShield, VoicePrint, CallAnalysis) - CorrelationEngine with temporal + entity-based correlation detection - CorrelationService orchestrator with dashboard API - Correlation API routes (/api/v1/correlation/*) - Service emitters wired to DarkWatch, SpamShield, VoicePrint - pnpm workspace config for monorepo	2026-05-02 01:10:44 -04:00