Harden stamp/verify/hash_report so unknown and content-shaped args fail
instead of being ignored; publish additionalProperties=false and cover
with schema/runtime tests. Also keep streamable-http host allowlist.
WhatToChange: recommended-changes/2026-09-21-sample-page/
What-to-Change.md
What-to-Change-To.md
How-to-implement-the-changes.md
What was actually done:
- site/index.html calls stamp, verify, or hash_report over Streamable HTTP.
- README points at the sample page and https://mcp.georgelambert.org/.
What was not done:
- The public host does not reverse-proxy the MCP listener. A page on the internet cannot call 127.0.0.1, and the VeraeTime bearer token stays off an open listener.
WhatToChange: recommended-changes/2026-09-21-docs-and-cors/
What-to-Change.md
What-to-Change-To.md
How-to-implement-the-changes.md
What was actually done:
- Markdown, HTML, and PDF for standards, architecture, API, and the operator guide.
- README points at scripts/build-docs.sh.
- VERAE_MCP_CORS=1 enables CORS and JSON responses on the Streamable HTTP app.
What was not done:
- (none)
WhatToChange: recommended-changes/2026-09-21-event-loop-and-ledger-perms/
What-to-Change.md
What-to-Change-To.md
How-to-implement-the-changes.md
What was actually done:
- Global HTTP stamp and verify run via asyncio.to_thread.
- File ledger saves chmod 0600.
- .gitignore covers coverage, mypy, logs, and editor directories.
What was not done:
- (none)
