Repository navigation

fix(privacy): mask sole-trader / natural-person pairs on /flows and /competition - #345

Open

LyuboslavLyubenov wants to merge 50 commits into

midt-bg:mainfrom

LyuboslavLyubenov:fix/extend-mask-invariant-to-other-surfaces

Commits on Jul 28, 2026

loop deliverables
LyuboslavLyubenov
committed
2bdea8a
fix(privacy): centralize X-Robots-Tag in hardenResponse via X-Privacy-Mask marker

opencode
authored and
LyuboslavLyubenov
committed
8e5f515
fix(privacy): mask eik on /companies/:eik.data and forward marker through headers()
LyuboslavLyubenov
committed
dae52db
docs(architecture,privacy): reflect worker-level noindex + .data coverage
LyuboslavLyubenov
committed
5da7ca5
docs(privacy): add ADR-0003 + operational masking guide, cross-link ADR-0002
LyuboslavLyubenov
committed
71f3839
docs(adr): fit new adr/ layout — extract privacy policy to 0007, renumber worker adr to 0008
LyuboslavLyubenov
committed
e44fc6c
style: prettier-format the privacy-masking files for blocking lint
LyuboslavLyubenov
committed
1f26be9
fix(privacy): remove redundant markPrivacyMaskApplied calls in csv-export
LyuboslavLyubenov
committed
6ac6539
fix(privacy): guard natural-person mask with bidder_kind to stop consortium over-masking
LyuboslavLyubenov
committed
b47225b
docs(privacy): correct stale isNaturalPersonBidder docstring (no inline duplication)
LyuboslavLyubenov
committed
d56e23d
docs(privacy): record displayName + slug policy decisions (ADR-0007 §6, §7)
LyuboslavLyubenov
committed
7073132
fix(privacy): add consortium guard to JSON masker for parity with CSV path
LyuboslavLyubenov
committed
127edd6
fix(privacy): mask sole-trader ЕИК on contract page + .data twin
LyuboslavLyubenov
committed
6f65c83
test(privacy): prove contract .data marker reaches X-Robots-Tag via real worker
LyuboslavLyubenov
committed
85822a7
test(privacy): adapt masking fixtures to upstream getDb + ContractParty changes
LyuboslavLyubenov
committed
1d4ca86

Commits on Aug 5, 2026

Commits on Aug 10, 2026

merge upstream/main into PR #183: rebase onto current upstream and resolve conflicts
LyuboslavLyubenov
committed
287a7a8

Commits on Aug 13, 2026

merge upstream/main into PR #183: keep mergeable onto current upstream
LyuboslavLyubenov
committed
93e816e

Commits on Aug 16, 2026

Commits on Aug 19, 2026

Commits on Aug 20, 2026

fix(privacy): mirror the loader consortium guard in company meta()
LyuboslavLyubenov
committed
3fd03af

Commits on Aug 21, 2026

Commits on Aug 22, 2026

Commits on Aug 24, 2026

fix(db): project legal_form on the list path so /companies + .data don't 500
LyuboslavLyubenov
committed
75251eb

Commits on Aug 27, 2026

merge upstream/main into PR #183: keep mergeable onto current upstream
Lyuboslav Lyubenov
committed
0a9152b

Commits on Aug 31, 2026

merge upstream/main into PR #183: keep mergeable onto current upstream
Hermes Cron
committed
16b4a5c

Commits on Sep 1, 2026

feat(db): surface masked boolean and lock eikValid with eik on the leaderboard list (PR #183 review)
Hermes
committed
e9e9f36
fix(web): drop privacy-mask forwarding to leaderboard HTML and unlink masked rows (PR #183 review)
Hermes
committed
5939b10
fix(web): zero eikValid and hasEik on masked company profile loader (PR #183 review)
Hermes
committed
13fca7b
fix(web): stamp privacy marker in contract.json.tsx per ADR-0040 (PR #183 review)
Hermes
committed
fed1c24
fix(web): strip server-only bidder_legal_form on contract page loader (PR #183 review)
Hermes
committed
e7c55a1
refactor(db): drop redundant bidder_legal_form projection in CSV streamer (PR #183 review)
Hermes
committed
4b352ae

Commits on Sep 2, 2026

fix(db): mask company slug on the leaderboard list for natural-person rows
Lyuboslav Lyubenov
committed
115163a
fix(web): do not link masked sole-trader rows from the home top-10
Lyuboslav Lyubenov
committed
9308672

Commits on Sep 3, 2026

fix(db,web): mask sole-trader / natural-person pairs on /flows
Lyuboslav Lyubenov
committed
3800d89
fix(db,web): mask sole-trader / natural-person pairs on /competition
Lyuboslav Lyubenov
committed
9c9a326

Commits on Sep 4, 2026

fix(db): replace base64url encoding with one-way hash for maskedCompanySlug
Hermes Cron
committed
4c2eddb
test(web): pin /companies EИК-leak invariant end-to-end via the real toCompanyListItem
Hermes Cron
committed
7a4a7f9
docs(api-contract): correct CompetitionPair.bidderName doc to reflect post-masking invariant
Hermes Cron
committed
d0db28a
fix(test): widen companies.render mount signature to satisfy RRv7 type
Hermes Cron
committed
eaeba63

Commits on Sep 5, 2026

merge upstream/main into PR #345: keep mergeable onto current upstream
Lyuboslav Lyubenov
committed
27ada1b

Commits on Sep 16, 2026

merge upstream/main into PR #345: keep mergeable onto current upstream
Lyuboslav Lyubenov
committed
ebe0b29