Security remediation foundation

[projectamazonph]

Summary

• harden trusted client IP handling and auth rate-limit identity
• resolve current database authorization and add revocable sessions
• enforce same-origin checks for admin content mutations
• update Prisma migration history, CI, security docs, changelog, and remediation ledger

Verification

• 449 tests passed; 85 opt-in live-server tests skipped
• production build passed
• TypeScript passed
• Prisma validation passed
• ESLint passed with 0 errors (28 pre-existing warnings)

Rollback

Revert the five commits in this PR in reverse order. The session-version migration is additive; retain the column if rollback occurs after deployment unless a separate reviewed migration removes it.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
interview-lab	Ready	Preview	Aug 21, 2026 10:24am

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ee8c32ac-dcf4-4f6b-9830-3db30ffaa2b2

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}