feat(gateway): trust forwarded client IPs only from trusted proxies - #165

Draft

seonghobae wants to merge 10 commits into

mainfrom

work/gap-83-trusted-proxy

Commits on Sep 4, 2026

feat(gateway): trust forwarded client IPs only from trusted proxies
codex
committed
6e2e5ee
refactor(gateway): bootstrap trusted proxy policy
codex
committed
3e75535
test(gateway): reproduce mapped IPv6 trusted CIDR prefix
seonghobae
committed
ae26fe5
test(gateway): keep mapped CIDR configuration fail closed
seonghobae
committed
c6c4819
docs(security): add peer-reviewed proxy trust evidence
seonghobae
committed
3415b74
fix(gateway): canonicalize mapped trusted-proxy CIDRs
codex
committed
77717ac
test(gateway): reject out-of-range trusted-proxy prefixes
seonghobae
committed
29373ab
fix(gateway): restore fail-closed trusted-proxy CIDR grammar
seonghobae
committed
4b96f4e
Merge remote-tracking branch 'origin/main' into work/gap-83-trusted-proxy
codex
committed
95b9f3d
docs: raise trusted-proxy doc coverage
codex
committed
99581e0