JSLMPR 430d71fae8 Gate the REST render endpoint behind an approval flag ... POST /v1/edit-projects/{projectId}:render was unauthenticated -- anyone could trigger a render. It now requires an approved.flag in the project directory and returns 409 otherwise (config video-clipping.editing.require-render-approval, default true). This closes the "no check at all" hole; it is a basic presence gate, not yet authenticated/digest-bound authorization (a remaining hardening item). New SpringBootTest asserts 409 without approval; the delegation unit test disables the gate. mvn verify 271/0. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MPuJXQyAeWpFcTtcnxo1UN		2026-07-24 12:38:12 +02:00
..
java/org/example/videoclips	Gate the REST render endpoint behind an approval flag	2026-07-24 12:38:12 +02:00
resources	R6: cross-dissolve transitions between montage beats	2026-07-23 23:41:12 +02:00