docs: note intake status PATCH is limited to draft or submitted (ericfitz/tmi#1100) Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: correct who can start a collaboration session (ericfitz/tmi#1089) POST .../collaborate requires reader access (x-tmi-authz ownership reader; the handler has no writer check). Mutations still need writer. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: add Surveys and Intake page (ericfitz/tmi#1090) Migrated from docs/survey-api-design.md, corrected to the live /admin/surveys, /intake and /triage/survey_responses paths. Transitions are PATCH /status operations; the server enforces status values but not transition order; triage access follows the reviewer-group rule (#1100). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: reconcile Configuration Model and Timmy pages with shipped behavior (ericfitz/tmi#1095) Timmy is released; keys accept YAML/env overrides; dump flag and llm_provider validation are enforced at startup and on settings writes (#1102). Drop dead dev/1.4.0 references. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: fix WebSocket URLs, collaborate DELETE and feedback error tables (ericfitz/tmi#1089) Diagram WebSocket path is /threat_models/{id}/diagrams/{id}/ws with a ticket; Redis is a cache not in-memory storage; DELETE /collaborate ends the session only for the host; content feedback error table and 400 for constraint violations (#1099). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: correct Addon System and Webhook Integration pages (ericfitz/tmi#1098) Delivered vs completed status, active/terminal TTLs and 15 minute stale timeout, pending_delete handling, quota ownership, secret length, delegation token, and /threat_models paths. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: correct threat-modeling user guides (ericfitz/tmi#1097) Threat links (one diagram/cell/asset), ownership transfer, reviewer group auto-sharing, threat score bounds. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: correct collaboration semantics (ericfitz/tmi#1096) Remove nonexistent edit locks, presenter requests go to the host, conflicts are structural-only with last-write-wins, notification events actually emitted, shared per-session undo history. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: fix authorization field names and diagram type in examples (ericfitz/tmi#1094) Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: correct Architecture-and-Design page (ericfitz/tmi#1093) Oracle image, duplicate-principal and role-resolution rules, deny by default, group deletion, token storage, health check endpoint. The Q15 WebSocket auth fix landed with the #1092 commit. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: correct Authentication and Identity Linking pages (ericfitz/tmi#1092) WebSocket ticket-only auth, OAuth vs SAML token delivery, TMI_LOG_IS_DEV CORS switch, identity-link 404 semantics and {link_id}, session lifetime. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: document the error-code vocabulary (tmi#1048) Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UBEvpQjrvKmQn4BprnPbMh
docs: versioning via version-bump-bot after merge (tmi#1032); tmi-ux bumps on the PR Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01K9bcYHu4vBU8iTAt55n1GU
docs: settings-key escrow and restore runbook (tmi#1009), startup connect retries (tmi#972) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01K9bcYHu4vBU8iTAt55n1GU
docs: DFD generation refusals now surfaced (tmi-tf-wh#89) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01K9bcYHu4vBU8iTAt55n1GU
docs: Redis noeviction, rotation-failure alarm, rotator reconnect (tmi#1016, #1018, #1019) Secret-Rotation: Redis runs maxmemory 384mb noeviction (640Mi limit); revoke and client-credential delete fail closed with 503. New tmi-secret-rotation-failing alarm alongside tmi-secret-rotation-stale. A Redis restart mid-rotation no longer fails the run except before the swap. Replace allkeys-lru advice on five other pages with noeviction (an evicting policy can drop token revocations) and remove a Common-Issues command that deleted every Redis key. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZaffxdUjvovYXDXXoAcRB
docs: Angular 22.x / Vitest 5.x in Contributing (tmi-ux#974) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01XTXhR3iM4aV9mjVbNJ4a7V
docs: remove Tilt, document .local/k3s.json and --api-cidr, add Secret-Rotation runbook - tmi#995: Tilt inner loop removed; dev-restart is the loop. - tmi#998: CLUSTER=k3s needs .local/k3s.json; deploy-aws.sh needs --api-cidr or .local/aws-deploy.json; make lint runs ruff F on scripts/. - tmi#965 PR 1: new Secret-Rotation page (staged recovery marked untested), linked from Security-Operations and the sidebar; Configuration-Reference re-synced from tmi main 5e567aeb (rotator vars, secrets.file_dir). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01XTXhR3iM4aV9mjVbNJ4a7V
docs: drop callback_port requirement now that api.tmi.dev allows any loopback port (tmi#982) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01XTXhR3iM4aV9mjVbNJ4a7V
docs: server exits and restarts on DB connect failure (no retry yet, tmi#972) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs: align dev-env setup pages with docker-desktop/k3s dev-up CLUSTER is required, no kind or localhost:5000 registry, in-cluster Postgres, dev-reset/dev-nuke, Tilt currently broken. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs: fix dev-up steps, dev-restart scope, go prereq; mark Tilt broken From tmi fact-check against 66341796. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs: remove k3s-rp environment specifics from the public wiki Owner decision: describe k3s generically with placeholders. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs: rewrite Local-Development-Cluster for docker-desktop and k3s TMI no longer uses kind or a localhost:5000 registry; dev-up requires CLUSTER, runs Postgres in-cluster, and dev-reset/dev-nuke are documented. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs: Redis TLS and NATS mTLS (tmi#991) Regenerate Configuration-Reference from tmi config-reference.md and document cert-manager/Reloader prerequisites, the TLS test harness, and TLS on AWS. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs(analyzer): list webhook events that trigger analysis Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs: use tmi-platform namespace in k8s example; fix secrets sentence Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs: fix namespace, secrets, multi-arch and cost facts from tmi review Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs(analyzer): correct DFD refusal behavior, add Jev shadow comparison Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD
docs: point tmi-ux AWS deploy at deploy:aws and terraform/aws Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg5MHFairCRfF79WuJaapD