Priority: MED — security.
The self-hosted worker's HTTP endpoints (/spend, /usage, /check, /test-alert) are unauthenticated unless ADMIN_SECRET is set, and /check can trigger destructive actions while /test-alert can be spammed. Default to fail-closed (refuse if no ADMIN_SECRET configured) rather than fail-open.
From FEEDBACK-from-divinci-deployment.md — real-world findings from the Divinci self-hosted deployment, 2026-06-17.
Priority: MED — security.
The self-hosted worker's HTTP endpoints (
/spend,/usage,/check,/test-alert) are unauthenticated unlessADMIN_SECRETis set, and/checkcan trigger destructive actions while/test-alertcan be spammed. Default to fail-closed (refuse if noADMIN_SECRETconfigured) rather than fail-open.From
FEEDBACK-from-divinci-deployment.md— real-world findings from the Divinci self-hosted deployment, 2026-06-17.