{"commit":{"body":[{"label":"Why","text":"승인된 내부망 브라우저와 관제에서 파일 조회 토큰 연계 없이 클립과 썸네일을 확인한다."},{"label":"What","text":"lan_public/authenticated 선택과 내부망 기본값을 추가하고 Gateway만 반영했다. IP는 socket peer로 판정한다."},{"label":"Impact","text":"HTTPS와 경로 보호 및 제어 인증은 유지하며 Analytics/Sidecar/Redis와 채널 PID/run을 보존했다."},{"label":"Verify","text":"표적2개/두 정책 nginx -t PASS, 실제 CA검증 GET·HEAD200/Range206/비허용주소 및 위조헤더403/보호파일404/제어401. 브라우저 재생은 미검증."},{"label":"Rollback","text":"authenticated로 기존 Manager 토큰 정책을 선택 가능하다. 자동 rollback은 하지 않았고 활성 설정과 evidence를 보존했다."}],"title":"feat(gateway): 내부망 Artifact 무토큰 조회 정책 적용"},"created_at":"2026-09-18T07:49:50+00:00","expires_at":"2026-09-19T07:49:50+00:00","job_id":"20260918-contextra-media-lan-r01","paths":[{"change":"modified","content_sha256":"3768d24789ca5e023fe088eb1a360d7706c6c1ddea1e90f00541fa7ed530a119","path":"deploy/secure-bridge.compose.yml"},{"change":"modified","content_sha256":"066316431776ede6c4e80aa2c03738503728a356155c377df2449dd73d47cc42","path":"deploy/secure-bridge.env.example"},{"change":"added","content_sha256":"88b9af0ed9dc0c9d6ebc7830b8b4c7afb0938d695cb4b24837b9c785712c0613","path":"docker/secure-gateway-entrypoint.sh"},{"change":"modified","content_sha256":"04aed0b8fbf2f4656de0bae69c9569aa1cb677595521526cf6f391b71dd12828","path":"docker/secure-gateway.conf.template"},{"change":"modified","content_sha256":"ff50b6f121d3447ed0629621e89c3cf0ac720bd61b3ae3e48ae6cf0f400f6fe4","path":"docs/integration/WEB_START_PREPARATION.ko.md"},{"change":"modified","content_sha256":"d2d95c7c105bef8ae7c0e9aca3d7608cc109bdaa2dbd811d7923c71fbc39fc43","path":"docs/profiles/ltb1021/topics/runtime-lifecycle/README.ko.md"},{"change":"added","content_sha256":"6222ff81cb8deaeb0e728d25263fc0d24429ecaf2f9eb52229b335a0dd948e03","path":"docs/profiles/ltb1021/topics/runtime-lifecycle/runs/20260918T164819+0900-run-media-lan-public.md"},{"change":"modified","content_sha256":"715fbb5c319a77441bfc3a05a1460cfde92a1a4ba10f62c06e2dd95278b7bd6b","path":"tests/test_secure_bridge_tls_gateway.py"}],"plan_hash":"e8874f688fc9945149fc02f6c26e72411bc85a74e8799ec090c012764414cc60","profile":"ltb1021","push":{"branch":"task/runtime-lifecycle-refactor","mode":"upstream","remote":"origin","remote_identity":"sha256:3a9ce41319a2ebea","upstream_head":"0071377c43dfd9fa8beb7fccab8f10447b1b14fa","upstream_ref":"origin/task/runtime-lifecycle-refactor"},"repository":{"baseline_head":"0071377c43dfd9fa8beb7fccab8f10447b1b14fa","branch":"task/runtime-lifecycle-refactor","worktree":"/workspace/contextra-analytics-runtime-lifecycle-refactor"},"schema_version":"ltb1021.codex_hub.git_closeout_manifest.v1","session_alias":"work-session","verify":["2 targeted tests and nginx -t for both policies PASS; CA-verified GET/HEAD/Range PASS","Outside-LAN namespace and spoofed headers denied; control/private paths protected; channels preserved; WSS connected","git diff --check and Markdown links PASS"]}