feat(broker): authenticated ingress for the native plan_admitted mint (mint-control S3) by SollanSystems · Pull Request #316 · SollanSystems/buildplane

feat(broker): add the PlanAdmission authority role to the confinement boundary

SollanSystems

committed

9858938

feat(broker): parse the closed plan-admission host deployment config

SollanSystems

committed

abd379b

feat(broker): authenticate the plan-admission ingress before any frame byte

SollanSystems

committed

76d7ec6

feat(broker): sign the closed plan-admission response under its own domain

SollanSystems

committed

51477d3

feat(broker): serve the plan-admission mint behind its own protected host

SollanSystems

committed

15a4b07

test(ledger): pin the plan_admissions schema against its TypeScript reader

SollanSystems

committed

b1ff28e

docs(operations): record the plan-admission ingress in the compatibility matrix

SollanSystems

committed

cc4c7c0

feat(deploy): stage the plan-admission host units alongside the other authority hosts

SollanSystems

committed

af136e2

style: apply rustfmt and biome formatting to the plan-admission slice

SollanSystems

committed

29e5ed3

fix(broker): close descriptors the kernel installed before refusing a truncated frame

SollanSystems

committed

c1c3310

fix(broker): refuse a disqualified plan-admission request before staging its bytes

SollanSystems

committed

caf61ce

docs(broker): state the trusted base as attested rather than re-derived

SollanSystems

committed

bd579e2

test(broker): drive the run-start attestation and peer identity through the real host

SollanSystems

committed

70cb4bf

fix(broker): tighten the plan-admission request boundary and its test claims

SollanSystems

committed

446c3da

docs(operations): add the plan-admission host to the governed runbook

SollanSystems

committed

7761094

docs(broker): scope the nothing-staged claim to the ingress boundary

SollanSystems

committed

5b85689

fix(kernel): bind the plan-admitted dispatch gate to the admitting run

SollanSystems

committed

762f6d8

fix(broker): bind the signed plan-admission response to its run

SollanSystems

committed

8da7295

fix(broker): pre-check request shape and fail closed on the CAS stage

SollanSystems

committed

e5b515a

docs(kernel): note the per-admission run binding is not one-per-run

SollanSystems

committed

3bbdfd4

style: rustfmt reflow of the drift-test query assertion

SollanSystems

committed

1174f85

fix(broker): refuse inadmissible plan bytes before staging them

SollanSystems

committed

dd435a0

docs(ledger): correct the false CAS temp-cleanup claim

SollanSystems

committed

f6c8f58

chore: changeset for the kernel cross-run dispatch-binding fix

SollanSystems

committed

9c0566a

Navigation Menu

feat(broker): authenticated ingress for the native plan_admitted mint (mint-control S3) - #316

feat(broker): authenticated ingress for the native plan_admitted mint (mint-control S3)#316
SollanSystems wants to merge 24 commits into
mainfrom
feat/mint-control-s3

Commits on Aug 24, 2026

feat(broker): add the PlanAdmission authority role to the confinement boundary

feat(broker): parse the closed plan-admission host deployment config

feat(broker): authenticate the plan-admission ingress before any frame byte

feat(broker): sign the closed plan-admission response under its own domain

feat(broker): serve the plan-admission mint behind its own protected host

test(ledger): pin the plan_admissions schema against its TypeScript reader

docs(operations): record the plan-admission ingress in the compatibility matrix

feat(deploy): stage the plan-admission host units alongside the other authority hosts

style: apply rustfmt and biome formatting to the plan-admission slice

fix(broker): close descriptors the kernel installed before refusing a truncated frame

fix(broker): refuse a disqualified plan-admission request before staging its bytes

docs(broker): state the trusted base as attested rather than re-derived

test(broker): drive the run-start attestation and peer identity through the real host

fix(broker): tighten the plan-admission request boundary and its test claims

docs(operations): add the plan-admission host to the governed runbook

docs(broker): scope the nothing-staged claim to the ingress boundary

fix(kernel): bind the plan-admitted dispatch gate to the admitting run

fix(broker): bind the signed plan-admission response to its run

fix(broker): pre-check request shape and fail closed on the CAS stage

docs(kernel): note the per-admission run binding is not one-per-run

style: rustfmt reflow of the drift-test query assertion

fix(broker): refuse inadmissible plan bytes before staging them

docs(ledger): correct the false CAS temp-cleanup claim

chore: changeset for the kernel cross-run dispatch-binding fix