P2 follow-ups: upload cap, orphan GC, drop classic UI #11

2026-08-07T20:12:25-05:00

ilia commented

2026-08-07 20:12:25 -05:00

Summary

Cap recording uploads at 5 MiB (STORK_MAX_UPLOAD_BYTES)
Opportunistic GC of empty boards older than 48h (STORK_ORPHAN_BOARD_HOURS); protects Family invite + readonly demo
Remove classic static/index.html (paper UI only; /v1 already redirects)

Test plan

.venv/bin/pytest — 32 passed
ruff clean
Deploy + confirm /static/index.html 404 and oversized upload 413

## Summary - Cap recording uploads at 5 MiB (`STORK_MAX_UPLOAD_BYTES`) - Opportunistic GC of empty boards older than 48h (`STORK_ORPHAN_BOARD_HOURS`); protects Family invite + readonly demo - Remove classic `static/index.html` (paper UI only; `/v1` already redirects) ## Test plan - [x] `.venv/bin/pytest` — 32 passed - [x] ruff clean - [ ] Deploy + confirm `/static/index.html` 404 and oversized upload 413

ilia added 1 commit 2026-08-07 20:12:26 -05:00

Cap uploads, GC empty boards, drop classic UI

CI / python-ci (pull_request) Successful in 1m9s

Details

CI / secret-scan (pull_request) Successful in 32s

Details

66818f500b

Close residual audit P2: 5 MiB recording limit, opportunistic orphan
board GC, and remove static/index.html.

ilia scheduled this pull request to auto merge when all checks succeed 2026-08-07 20:13:17 -05:00

ilia merged commit dbcaf5b55c into main

2026-08-07 20:15:19 -05:00

ilia deleted branch harden/p1-p2-followups

2026-08-07 20:15:19 -05:00

ilia referenced this issue from a commit

2026-08-07 20:15:19 -05:00

Merge pull request 'P2 follow-ups: upload cap, orphan GC, drop classic UI' (#11) from harden/p1-p2-followups into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: ilia/stork#11