chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

feat(tyr): complete phase 2 network hardening

Browse Source
This commit is contained in:
Chris Christiansen 2026-09-02 19:31:45 +00:00
parent fdd803d17e
commit c88f0de711
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
project/roadmap.md
View File

@ -14,7 +14,7 @@ This document tracks the high-level goals and future development milestones for
## Phase 2: Network Hardening & Perimeter Defense
- [x] Establish GCP VPC Service Controls (VPC-SC) perimeter.
- [x] Configure Private Service Connect (PSC) for all Google APIs.
- [x] Deploy Cloud Armor WAF policy.
- [x] Enforce IAP-only SSH and restrict Cloud Run ingress.
## Phase 3: Memory Bank & Project Management
- [x] Implement `read_memory_bank` and `write_memory_bank` MCP tools.

4
tyr/memory_bank/completed.md
View File

@ -23,3 +23,7 @@
- **Task 2.3: Deploy Cloud Armor WAF**
- Status: **Complete**
- Notes: Created `tyr-armor-policy` with XSS, rate-limiting, and default-deny rules.
- **Task 2.4: Harden Ingress**
- Status: **Complete**
- Notes: Replaced default SSH rule with IAP-only rule and set Cloud Run ingress to internal.