Aaron Bockelie fd53f45149 fix(tls): drop inert rejectUnauthorized:false default, clears scorecard Risk ... Closes #163. The literal only existed in DEFAULT_SETTINGS and was passed to the inbound https.createServer, which never sets requestCert — so Node ignored it. certificate-manager already defaults the effective value to true via `!== false`, so removing the default is behavior-preserving and removes the exact token Obsidian's scorecard pattern-matches as 'disables SSL verification'. Adds tests/security/tls-cert-verification.test.ts as a regression guard: fails if the flagged literal returns or the secure default flips.		2026-05-16 11:59:51 -05:00
..
path-validator.test.ts	feat: Implement comprehensive security architecture	2025-07-16 09:16:24 -05:00
tls-cert-verification.test.ts	fix(tls): drop inert rejectUnauthorized:false default, clears scorecard Risk	2026-05-16 11:59:51 -05:00
vault-security-manager.test.ts	feat: Implement comprehensive security architecture	2025-07-16 09:16:24 -05:00