TerraYield federation-peer track: contract v1 freeze, MCP conformance, brokered credentials, ref-rendering (closes #12-#20) - #23

Merged

mortonanalytics merged 69 commits into

mainfrom

feat/federation-peer-track

Jul 26, 2026

Commits on Jun 22, 2026

harden federation core: SQLi fix, peer-status guards, RBAC binding gates, session race

mortonanalytics
and
claude
committed
b4e2fef
fail-closed workspace scope + ingest size cap + bucket allowlist hardening

mortonanalytics
and
claude
committed
003a2fd
generalize event detail panel: render operator-declared fields, drop earthquake schema

mortonanalytics
and
claude
committed
b4ecb88
docs: event-view-schema requirements + tri-thrust intake dispositions

mortonanalytics
and
claude
committed
8d0c8bb
test(federation): negative-path regressions for tri-thrust hardening

mortonanalytics
and
claude
committed
f5e6761

Commits on Jul 7, 2026

docs: add minimal CLAUDE.md (build/test anchor); fix stream-P rule paths + stale P1-P3 status

mortonanalytics
and
claude
committed
903677b

Commits on Jul 10, 2026

chore(codex): add federation backlog guidance
mortonanalytics
committed
700ed86

Commits on Jul 25, 2026

fix(test): align peer-poll tests with TT-A06 fail-closed binding scope

mortonanalytics
and
claude
committed
25136df
ci: run the 19 test suites the workflow never invoked

mortonanalytics
and
claude
committed
7165939
docs(contract): freeze app-integration contract v1 with executable conformance

mortonanalytics
and
claude
committed
633aa4e
merge: issue #17 — freeze app-integration contract v1

mortonanalytics
and
claude
committed
8158be0
ci: wire contract_v1_integration into the suite loop

mortonanalytics
and
claude
committed
7ce9abd
feat(federation): pre-broker per-(workspace, peer) static credentials (#19)

mortonanalytics
and
claude
committed
a5cea36
merge: issue #19 — pre-broker per-(workspace,peer) credentials

mortonanalytics
and
claude
committed
9326991
ci: wire peer_credential_integration into the suite loop

mortonanalytics
and
claude
committed
3757462
test(webhooks): cover signature, skew, purge, and envelope rejection paths

mortonanalytics
and
claude
committed
fe09a6f
merge: issue #20 — webhook ingress negative-path coverage

mortonanalytics
and
claude
committed
425dac1
fix(contract): make webhook approval_required optional, amend v1 to match

mortonanalytics
and
claude
committed
019f558
feat(federation): reference stub peer + standalone conformance kit (#16)

mortonanalytics
and
claude
committed
9f4c465
merge: issue #16 — reference stub peer + standalone conformance kit

mortonanalytics
and
claude
committed
c7bfbc8
fix(webhook): emit signalIds per contract v1 section 3.5

mortonanalytics
and
claude
committed
8356247
feat(federation): MCP peer-client conformance for spec-conforming servers

mortonanalytics
and
claude
committed
47bc2f2
merge: issue #15 — MCP client spec conformance + nextCursor null fix

mortonanalytics
and
claude
committed
889b92c
ci: wire mcp_conformance_integration into the suite loop

mortonanalytics
and
claude
committed
35d38d2
feat(identity-broker): real SaaS token refresh/revoke + per-(workspace, peer) delegated tokens (#12)

mortonanalytics
and
claude
committed
c966e6f
merge: issue #12 — real broker refresh/revoke + per-(workspace,peer) delegation

mortonanalytics
and
claude
committed
5071b32
ci: wire identity_broker_integration into the suite loop

mortonanalytics
and
claude
committed
1c7b989
feat(shell): harden peer ref-rendering — URL validation, cursor paging, expiry (#18)

mortonanalytics
and
claude
committed
11827fe
merge: issue #18 — peer ref-rendering, tile URL validation, pagination, zero-persistence proof

mortonanalytics
and
claude
committed
a916ff5
docs(contract): sync v1 enforcement status with what issue #18 landed

mortonanalytics
and
claude
committed
9dc4128
test(federation): peer join lifecycle e2e — stranger to rendered panels (#13)

mortonanalytics
and
claude
committed
9cdc25e
merge: issue #13 — peer join-to-render lifecycle E2E

mortonanalytics
and
claude
committed
febc149
ci: wire peer_ref_rendering + peer_lifecycle_e2e into the suite loop

mortonanalytics
and
claude
committed
2a5df3e
ci+docs: run cargo test --lib; correct three contract overclaims

mortonanalytics
and
claude
committed
3bf6743
fix(conformance): stop failing conforming peers; close replay-window gap

mortonanalytics
and
claude
committed
998b1d7
fix(federation): scope peer handles to the request workspace; stop 401 tier downgrade

mortonanalytics
and
claude
committed
100072f
merge: harden — conformance kit correctness + test integrity

mortonanalytics
and
claude
committed
43d4c14
ci: run --bins too, so the conformance kit's unit tests execute

mortonanalytics
and
claude
committed
5a8aaf9
merge: harden — workspace-scoped credentials on federation paths, no tier downgrade

mortonanalytics
and
claude
committed
035b11d
ci: wire credential_presentation_integration; re-audit shows zero orphans

mortonanalytics
and
claude
committed
3370578
ci: --include-ignored, so non-ignore-gated suites actually run

mortonanalytics
and
claude
committed
fb75447
fix(federation): scope peer caches by credential; no 401 downgrade on the connector path

mortonanalytics
and
claude
committed
0349899
merge: harden — workspace-scoped peer cache keys, connector tier gate, kit false-FAILs

mortonanalytics
and
claude
committed
7a1b9bb
docs(contract): v1 digest hex is case-insensitive, not lowercase-only

mortonanalytics
and
claude
committed
4f0b29c
docs(contract): four more overclaims, incl. two of my own in section 8.2

mortonanalytics
and
claude
committed
4a93b6f
fix(federation): gate scoped-manifest eviction on change; keep synthesized slices out of the catalog

mortonanalytics
and
claude
committed
4d26ed3
merge: harden — gate manifest eviction on change; real peer-authored slice for catalog

mortonanalytics
and
claude
committed
b27f431
fix(conformance-kit): transport parity with production; end the false-FAIL classes

mortonanalytics
and
claude
committed
c5a0593
merge: harden — conformance kit speaks streamable-HTTP, matches production checks

mortonanalytics
and
claude
committed
b25d4a3
docs(contract): registration_endpoint is required by the code, say so in section 2

mortonanalytics
and
claude
committed
ea2a116
docs(contract): correct errors introduced by my own earlier corrections

mortonanalytics
and
claude
committed
6722d60
fix(kit): FAIL a peer missing registration_endpoint instead of PASSing with a note

mortonanalytics
and
claude
committed
6e23628
fix(ci): do not --include-ignored phase01_chat; it needs a live Ollama

mortonanalytics
and
claude
committed
835502a
ci: add a playwright e2e job (F13)

mortonanalytics
and
claude
committed
0b7079f
docs(contract): repair miscited and ambiguous code citations (F12)

mortonanalytics
and
claude
committed
6708089
fix(federation): accept null foreign_roles, bound refresh whoami, map -32002 to 404

mortonanalytics
and
claude
committed
a4d3f9a
merge: follow-ups F5/F6/F7 — whoami null roles, bounded refresh, chart 404

mortonanalytics
and
claude
committed
37bd01b
fix(kit)+docs: honour null foreign_roles; sync contract with F5/F6/F7

mortonanalytics
and
claude
committed
93f0031
fix(peers): unblock the join path — optional registration_endpoint, origin discovery, port-aware names, paginated review manifest

mortonanalytics
and
claude
committed
d22498f
merge: follow-ups F2/F3/F4/F10a — optional registration_endpoint, RFC 8414 origin discovery, port in peer name, paginated manifest

mortonanalytics
and
claude
committed
c42c9a9
fix(federation): enforce peer tool allowlist, cache MCP sessions, page tools/list, keep slices honest

mortonanalytics
and
claude
committed
fe2fd08
merge: follow-ups F1/F8/F9/F10b/F11 — allowlist enforcement, MCP session cache, dead code, pagination, slice validity

mortonanalytics
and
claude
committed
828e497
feat(security): fail closed on an authorized-but-empty tool allowlist

mortonanalytics
and
claude
committed
62d5287
ci: wire the four follow-up suites into the loop

mortonanalytics
and
claude
committed
6984c33
feat(security): make org-isolation RLS enforceable (F14 / AC-15)

mortonanalytics
and
claude
committed
4fadcf8
merge: F14 — RLS enforcement provable under a restricted role

mortonanalytics
and
claude
committed
d850c45
ci+docs: wire rls_enforcement_integration; retire stale RLS-is-inert claims

mortonanalytics
and
claude
committed
af7b71c
fix(migrations): never edit an applied migration; move the note into 0050

mortonanalytics
and
claude
committed
7756e89
fix(oauth): resolve discovery off the origin on the refresh paths too

mortonanalytics
and
claude
committed
f45cbe3