michael 22653ff4ff docs(pam): clarify safe_user contract — pre-filter, not authoritative boundary ...

x..y is correctly NOT rejected by the slash/dot/empty/NUL guard; the
recipe now documents this as an intentional regression test against
over-rejection. Frames canonicalize-then-verify as Phase 17 follow-up
hardening.

2026-04-27 13:00:11 -07:00

..

test

docs(pam): smoke-test recipe + test PAM stack file (Task B2)

2026-04-27 08:19:18 -07:00

Makefile

feat(pam): recovery-code mode with Argon2id verify and pending re-enroll handoff

2026-04-27 09:49:44 -07:00

pam_authforge_pending.c

feat(pam): recovery-code mode with Argon2id verify and pending re-enroll handoff

2026-04-27 09:49:44 -07:00

TESTING.md

docs(pam): clarify safe_user contract — pre-filter, not authoritative boundary

2026-04-27 13:00:11 -07:00