[Darkroom4364]

Closes #65

Changes

• Document the existing request-resolution, build-time/runtime, production-fallback, and credential-free provenance boundary in docs/payload-builds.md.
• Add focused readEffectiveBuildConfig coverage in server/internal/handlers/api/payload/build_contract_test.go for a credential-free control plus credential-key and raw-credential-byte rejection.

Boundary

No production behavior or runtime override was added. Effective config must match the build payload/listener/mutation seed; protocol is independently restricted to http/https; credentials are stripped or rejected before config.json and provenance publication.

Validation

• go test -count=1 -run '^TestReadEffectiveBuildConfigRejectsCredentialMaterial$' ./internal/handlers/api/payload in server/
• go test ./... in server/
• go vet ./... in server/

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9fb3581c-481b-4b4c-8aed-ad6330e880b1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/issue-65-config-audit

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}