inventory every enrolled passkey, including credentials without an active session
disclose only safe label/time/activity metadata
require exact-target fresh authorization for selective removal
atomically revoke a linked remote session while preserving current and unrelated sessions
add a mobile-safe trusted-access UI with recovery guidance and security journaling
Verification
python3 -m pytest tests/ -q — 1005 passed
focused backend/frontend tests — 5 passed
Chromium at 320×640 — no horizontal overflow, 44px remove target, safe text rendering
Closes #499
## What changed
- inventory every enrolled passkey, including credentials without an active session
- disclose only safe label/time/activity metadata
- require exact-target fresh authorization for selective removal
- atomically revoke a linked remote session while preserving current and unrelated sessions
- add a mobile-safe trusted-access UI with recovery guidance and security journaling
## Verification
- `python3 -m pytest tests/ -q` — 1005 passed
- focused backend/frontend tests — 5 passed
- Chromium at 320×640 — no horizontal overflow, 44px remove target, safe text rendering
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Closes #499
What changed
Verification
python3 -m pytest tests/ -q— 1005 passed