Security & Guard Rails
SAFETYBecause Firebreak interfaces directly with production source code and live routing infrastructure, security is engineered in depth across every layer.
4 min read
•Production Verified
Defensive Controls Matrix
| Threat / Hazard | Defensive Control | Source Location |
|---|---|---|
| Spoofed Webhooks | Timing-safe HMAC SHA-256 validation (crypto.timingSafeEqual). | packages/core/src/crypto/hmac.ts |
| Database Token Theft | Third-party access tokens encrypted at rest with AES-256-GCM. | packages/core/src/crypto/secrets.ts |
| SSRF Exploitation | Health check probes blocked from private IPs and cloud metadata (169.254.169.254). | packages/core/src/adapters/ssrf.ts |
| Accidental Rollbacks | Tactile 1,500ms Hold-to-Confirm web button; scoped permissions for MCP. | apps/web/src/components/incident/hold-to-confirm-button.tsx |
| Production Drift | Preflight asserting live Vercel deployment has not changed since proposal creation. | packages/core/src/domain/preflight.ts |
Drift Prevention During Outages
If an engineer deploys a hotfix while an operator is reviewing a proposed rollback, Firebreak's no_drift preflight assertion detects that the live production deployment ID differs from the proposal's baseline. The proposal is immediately cancelled to prevent overwriting the hotfix.