4 commits

Author	SHA1	Message	Date
Pierre-Olivier Mercier	36a72f013a	server: document lack of built-in authentication on Server type	2026-04-10 16:43:59 +07:00
Pierre-Olivier Mercier	2fa44f69a4	server: return 500 status on collect errors instead of 200 ... Errors from provider.Collect() and json.Marshal were returned with HTTP 200, making failures invisible to monitoring, proxies, and clients that check status codes. Return 500 Internal Server Error so HTTP-level tooling can detect failures without parsing the response body.	2026-04-10 16:43:56 +07:00
Pierre-Olivier Mercier	ec4efcf671	server: limit request body size on POST endpoints ... Add io.LimitReader (1 MB cap) to /collect, /evaluate, and /report handlers to prevent memory exhaustion from oversized requests.	2026-04-10 16:24:41 +07:00
Pierre-Olivier Mercier	8160adcdca	Initial commit	2026-04-08 00:53:15 +07:00