Skip to content

AOL-1162: strengthen Cloudflare and R2 safeguards - #4

Open
alanhe421 wants to merge 1 commit into
mainfrom
AOL-1162-cloudflare-protection
Open

AOL-1162: strengthen Cloudflare and R2 safeguards#4
alanhe421 wants to merge 1 commit into
mainfrom
AOL-1162-cloudflare-protection

Conversation

@alanhe421

@alanhe421 alanhe421 commented Jul 20, 2026

Copy link
Copy Markdown
Owner

Summary

  • require Cloudflare Turnstile Siteverify for job creation and retries
  • separate R2 input/output prefixes so raw uploads can expire independently
  • document production WAF rate limits, Turnstile secrets, and the R2 lifecycle rule
  • fail CI when the production Turnstile site key is missing

Validation

  • npm run typecheck
  • npm test (14 tests)
  • npm run build

Deployment prerequisites

Create the production Turnstile widget and configure TURNSTILE_SITE_KEY plus the Worker TURNSTILE_SECRET; then apply the documented WAF and R2 lifecycle rules.

Closes AOL-1162

Co-authored-by: multica-agent <github@multica.ai>
@alanhe421
alanhe421 force-pushed the AOL-1162-cloudflare-protection branch from 114bf49 to 6473f22 Compare July 20, 2026 13:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant