gemini(w4): analytics API no-internal-id response audit #124

New issue

Closed

opened 2026-05-28 01:20:42 +02:00 by codex · 1 comment

codex commented

2026-05-28 01:20:42 +02:00

Collaborator

Parent: #2
Agent lane: Gemini 3.5 Flash
Wave: 4 / analytics foundation
Risk class: low

Goal

Catch internal ID leaks before analytics becomes relied upon.

Context refs

AGENTS.md security/public ID rule
docs/agent-mcp-contract.md

Scope

Inspect analytics, transition history, recent activity, and flow health endpoints.
Search for returned raw id, cardId, listId, workspaceId.
Open/patch only exact leaks.

Acceptance

Audit list includes each endpoint checked.
No raw internal IDs in external API/MCP response contracts.
False positives are noted.

Suggested checks

Static search plus targeted response tests if practical.

Non-goals / fences

Do not deploy, restart production, rotate secrets, or run production migrations.
Do not widen MCP write authority or public exposure.
Keep the change small enough for one focused PR or one scouting report.

Expected output

A short PR or issue comment with findings, touched files, tests run, and remaining risks.

Parent: #2 Agent lane: Gemini 3.5 Flash Wave: 4 / analytics foundation Risk class: low ## Goal Catch internal ID leaks before analytics becomes relied upon. ## Context refs - `AGENTS.md` security/public ID rule - `docs/agent-mcp-contract.md` ## Scope - Inspect analytics, transition history, recent activity, and flow health endpoints. - Search for returned raw `id`, `cardId`, `listId`, `workspaceId`. - Open/patch only exact leaks. ## Acceptance - Audit list includes each endpoint checked. - No raw internal IDs in external API/MCP response contracts. - False positives are noted. ## Suggested checks - Static search plus targeted response tests if practical. ## Non-goals / fences - Do not deploy, restart production, rotate secrets, or run production migrations. - Do not widen MCP write authority or public exposure. - Keep the change small enough for one focused PR or one scouting report. ## Expected output A short PR or issue comment with findings, touched files, tests run, and remaining risks.

codex added the

labels

2026-05-28 01:20:42 +02:00

codex referenced this issue from a commit

2026-06-03 09:49:00 +02:00

docs(agent): audit analytics public id responses (#124)

codex referenced this issue from a pull request that will close it,

2026-06-03 09:49:17 +02:00

docs(agent): audit analytics public id responses #149

codex commented

2026-06-03 09:49:38 +02:00

Author

Collaborator

Codex PR opened: #149

Scope:

added docs/audits/analytics-public-id-response-audit.md,
checked getRecentActivity, getTransitionHistory, getFlowMetrics, getBoardFlowMetrics, and MCP wrappers,
found no raw internal id, cardId, listId, boardId, or workspaceId in the audited response contracts,
documented follow-up guardrail for future response-level tests.

Checks:

static search over agent router, MCP wrappers, and integration tests,
pnpm exec prettier --check docs/audits/analytics-public-id-response-audit.md — passed.

No production deploy, restart, DB migration, token/Infisical change, or runtime/API behavior change.

Codex PR opened: https://git.pdurlej.com/pdurlej/kan-ductor/pulls/149 Scope: - added `docs/audits/analytics-public-id-response-audit.md`, - checked `getRecentActivity`, `getTransitionHistory`, `getFlowMetrics`, `getBoardFlowMetrics`, and MCP wrappers, - found no raw internal `id`, `cardId`, `listId`, `boardId`, or `workspaceId` in the audited response contracts, - documented follow-up guardrail for future response-level tests. Checks: - static search over agent router, MCP wrappers, and integration tests, - `pnpm exec prettier --check docs/audits/analytics-public-id-response-audit.md` — passed. No production deploy, restart, DB migration, token/Infisical change, or runtime/API behavior change.