Launch-critical fixes for the public July-14 signup surface (swarm-audited by
MiniMax M3, Claude-verified against the frontend RPC call path):
- migration: DROP the "anon can insert with check(true)" RLS policy. It let
anon write arbitrary rows straight to the table, bypassing all join_waitlist
validation. The frontend already calls the join_waitlist RPC (rest/v1/rpc/),
never a direct insert, so signup is unaffected. RLS stays enabled with no
permissive INSERT policy = direct anon inserts denied by default.
- join_waitlist: cap email <=254, reject control chars, truncate referrer <=2048.
- waitlist-welcome edge fn: FAIL CLOSED — if WAITLIST_WEBHOOK_SECRET is unset,
return 401 instead of serving (was an open Resend relay). Guard the referral
code against ^[a-z2-9]{7}$ and cap email length before sending.
- vercel.json: add baseline security headers (nosniff, Referrer-Policy,
X-Frame-Options: DENY, HSTS, Permissions-Policy). CSP deferred (would break
the WebGPU hero's inline bootstrap without nonces) — documented.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add the firewall causal slice so a poisoned/injected memory is screened,
quarantined, and proven held-out on the receipt (influence_allowed=false):
- screen_write() detector (neuroscience/microglial_firewall.rs): deterministic
prompt-injection / exfiltration / poisoning screen with NFKC + homoglyph
folding and word-boundary matching to avoid false quarantines.
- Receipt gains quarantined[] / influence_allowed / engram_phases (additive,
serde-default, back-compatible with old receipts).
- New trace events memory.quarantine + episode.boundary (mirror the TS union).
- gate_writes() now screens every write and, on a quarantine verdict, suppresses
the node (held out of retrieval) + records the quarantine receipt + events, so
influence_allowed=false is ENFORCED, not cosmetic. Content capped at 16KB.
- VestigeEvent::MemoryQuarantined live broadcast.
Verified: cargo test vestige-core/vestige-mcp green, clippy -D warnings clean,
integration test proves a screened injection is absent from the write's retrieval.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The /launch landing page (bleeding-edge waitlist hero):
- Full-viewport WebGL node engine (src/lib/hero/nodeEngine.ts): 40k GPU particles
on a two-FBO GPUComputationRenderer running an 18s looping cinematic — particles
stream in from the screen edges, slam together and EXPLODE at center, reform into
a brain / graph constellation / neural lattice, dissolve back out, loop. Glowing
additive particles + UnrealBloom, fills the whole screen edge to edge.
- Key GPGPU fix: custom DataTexture shape targets read black in GPUComputationRenderer
(three.js #15882), so shape targets are computed PROCEDURALLY in-shader from the
per-particle seed. Position integrates raw per-frame velocity (Codrops pattern),
texel-center reference attribute.
- AmbientField (god-ray glow + parallax starfield), phantomBrain (deterministic
seed-from-identity memory graph), LandingHero/neuralFlow (WebGPU Cinema-storm
reuse + WebGL fallback, kept as alternates). Manifesto copy, seed input, email
capture. No em-dashes. SSR off + prerender for the WebGL route.
Waitlist backend (Supabase, owned data):
- supabase/migrations/0001_waitlist.sql (RLS-locked table, dedup), Edge Function
waitlist-join (CORS, validation, honeypot, dedup, Resend confirmation), setup doc.
Dashboard auth removed (reverts the launch-polish auth wall that 401'd the dashboard
against itself): mod.rs/state.rs/websocket.rs back to no-token, api.ts/websocket.ts/
+layout.svelte stripped of the token client. Pending-review UX + Memory PR gating kept.
Research/spec docs under docs/launch/. Frontend typechecks 0/0.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
