feat(audit): record permission denials centrally in the auth middleware - #413

Merged

dviejokfs merged 15 commits into

gotempsh:mainfrom

clau1902:feat/audit-permission-denied

Aug 7, 2026

Commits on Aug 7, 2026

fix(auth): audit permission denials safely
dviejokfs
committed
c1f02d5
fix(auth): bound permission denial audit storage
dviejokfs
committed
2f684aa
fix(security): bound query memory and audit data
dviejokfs
committed
6368dc7
fix(security): reject oversized rows before encoding
dviejokfs
committed
5ca8634
fix(security): redact audited data identifiers
dviejokfs
committed
77d2057
fix(cli): sanitize untrusted terminal output
dviejokfs
committed
791c660
fix(cli): sanitize invalid filter errors
dviejokfs
committed
799920f
fix(security): resolve PR review findings
dviejokfs
committed
5258a22
fix(security): enforce pre-wire Redis budgets
dviejokfs
committed
da3314c
fix(redis): bound aggregate admission work
dviejokfs
committed
9ff7df5
fix(security): close final review gaps
dviejokfs
committed
8983e63
fix(security): bound metadata scan work
dviejokfs
committed
2026792
fix(redis): preserve bounded cursor paging
dviejokfs
committed
1940516
fix(review): resolve PR blockers
dviejokfs
committed
7c4b8de
fix(review): close final compatibility gap
dviejokfs
committed
8d4b30c