From 6f12ace02da493996e2c38ad0bcda30146b11efd Mon Sep 17 00:00:00 2001 From: Andrew Stoltz Date: Thu, 18 Jun 2026 23:58:30 -0500 Subject: [PATCH] deploy(knowledge): SEC-3 Search/Editions authorize + rebuild_index gate -> v20260619-sec3-6370c95 Removes [AllowAnonymous] bypass on Search/Editions + role-gates rebuild_index (PR #14, 6370c95). Image built+imported (RKE2 socket). Fail-open while auth off (inert until SEC-1); image now carries the hardening. Co-Authored-By: Claude Opus 4.8 --- apps-gx10/knowledge/deployment-knowledge-web.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps-gx10/knowledge/deployment-knowledge-web.json b/apps-gx10/knowledge/deployment-knowledge-web.json index 802766d..45ab381 100644 --- a/apps-gx10/knowledge/deployment-knowledge-web.json +++ b/apps-gx10/knowledge/deployment-knowledge-web.json @@ -147,7 +147,7 @@ "value": "/data/vector-stores/corpus-cache" } ], - "image": "localhost/fc-knowledge-web:v20260618-knowledge-qwen3canary-50401dd-3154bbf", + "image": "localhost/fc-knowledge-web:v20260619-sec3-6370c95", "imagePullPolicy": "Never", "livenessProbe": { "failureThreshold": 3,