TODO.md

Keycast

API

• Move authentication checks to the api layer, not the model layer
• Rationalize all the teams methods
• DRY the error handling in api/http/teams.rs and the rest of the API
• Add audit logs

Web

• New policy form
• Permissions form
• policy card (with remove button)
• Remove key from team
• Remove authentication from key page
• Remove policies from team
• Audit logs

Core

Signer

• Run signer as separate process (that is run by concurrently as well)
• Finish permissions loop for approval

Config

• Make sure we reationalize config across all crates

Deployments

• Docker
• Deploy to Umbrel
• Deploy to StartOS