Hartmut
9ef7114c77
CI / Architecture Guardrails (pull_request) Successful in 3m49s
CI / Typecheck (pull_request) Failing after 4m26s
CI / Build (pull_request) Has been skipped
CI / Fresh-Linux Docker Deploy (pull_request) Has been skipped
CI / Lint (pull_request) Successful in 7m52s
CI / Assistant Split Regression (pull_request) Successful in 9m18s
CI / Unit Tests (pull_request) Successful in 11m35s
CI / E2E Tests (pull_request) Has been skipped
CI / Release Images (pull_request) Has been skipped
Adds a synchronous policy check that blocks (1) the curated >=12-char common-password list (rockyou top, predictable seasonal, admin defaults), (2) trivial patterns (single-char repeat, short-pattern repeat, keyboard or numeric sequences), and (3) passwords containing the user's email local-part or any name component. Wired into all five password-mutation sites: first-admin setup, admin createUser/setUserPassword, invite acceptance, and password-reset. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>