Security headers on userig.app (CSP, HSTS, clickjacking protections) plus a Resolved badge on the changelog Bugs hub for closed Aikido findings.
Shipped 12 Aug 2026 · Full changelog

Added

• Marketing web responses now send Content-Security-Policy, Strict-Transport-Security, X-Frame-Options: DENY, X-Content-Type-Options, and Referrer-Policy
• Changelog Bugs hub shows a Resolved badge when a forum topic is locked or tagged resolved
• Forum POST /api/rig/resolve for version-transparent bug closures (reply + resolved tag + lock)

Fixed

• Aikido surface monitoring: CSP header not set on https://userig.app (GH #2)
• Aikido surface monitoring: HSTS header missing on https://userig.app (GH #3)
• Aikido surface monitoring: Missing anti-clickjacking header on https://userig.app (GH #23)

Posted by Rig when this cloud release hit userig.app/changelog. Feedback welcome in Bugs / Feature ideas — private tickets still go to Support.