fix(metadata-protocol)!: a metadata body's stored content hash is served and compared only in keyed form, never copied, never evaluated (#21207) - #21436

Merged

objectstack-fleet[bot] merged 13 commits into

mainfrom

claude/issue-21207-exit-two-keyed-served-hash

Oct 2, 2026

Commits on Oct 2, 2026

test(metadata-protocol,mcp,plugin-audit,service-analytics): pin the stored content-hash exit family before the fix (#21207)
claude
committed
8c610b8
fix(metadata-protocol,objectql)!: the /meta doors and the data door serve the stored content hash only in keyed form (#21207)
claude
committed
63cd356
fix(mcp,plugin-audit,service-analytics,cli)!: the rest of the stored content-hash exit family (#21207)
claude
committed
b56ab4c
fix(metadata-protocol,plugin-audit): withheld-marker spelling, superseded pins, changeset (#21207)
claude
committed
b844c8c
Merge commit '41a3c8df15e347f8de1ec30702a8730f1104e4e4' into claude/issue-21207-exit-two-keyed-served-hash
claude
committed
61f66b6
fix(metadata-protocol,mcp,plugin-audit,service-analytics)!: the history change note that quotes a stored hash joins the family (#21207)
claude
committed
25c9224
fix(plugin-audit): a copied decision-audit note withholds the hashes it quotes (#21207)
claude
committed
27b5332
chore(plugin-audit,metadata-protocol): gate hygiene for the content-hash family (#21207)
claude
committed
9d3a09c
test(metadata-protocol): the served-content-hash pin's find double holds the caller's bound (#21207)
claude
committed
978def3
test(metadata-protocol): the served-content-hash pin's where-matcher refuses combinators it does not implement (#21207)
claude
committed
1ad5a00
fix(metadata-protocol)!: with no crypto provider, version tokens are keyed under a process-scoped ephemeral key, never empty (#21207)
claude
committed
7660d81
Merge origin/main into claude/issue-21207-exit-two-keyed-served-hash
claude
committed
8ca4966
test(cli): the absent-database audit pin counts every audited table, the decision-audit trail included (#21207)
claude
committed
b53bea8

Navigation Menu

fix(metadata-protocol)!: a metadata body's stored content hash is served and compared only in keyed form, never copied, never evaluated (#21207) - #21436

fix(metadata-protocol)!: a metadata body's stored content hash is served and compared only in keyed form, never copied, never evaluated (#21207)#21436
objectstack-fleet[bot] merged 13 commits into
mainfrom
claude/issue-21207-exit-two-keyed-served-hash

Commits on Oct 2, 2026

test(metadata-protocol,mcp,plugin-audit,service-analytics): pin the stored content-hash exit family before the fix (#21207)

fix(metadata-protocol,objectql)!: the /meta doors and the data door serve the stored content hash only in keyed form (#21207)

fix(mcp,plugin-audit,service-analytics,cli)!: the rest of the stored content-hash exit family (#21207)

fix(metadata-protocol,plugin-audit): withheld-marker spelling, superseded pins, changeset (#21207)

Merge commit '41a3c8df15e347f8de1ec30702a8730f1104e4e4' into claude/issue-21207-exit-two-keyed-served-hash

fix(metadata-protocol,mcp,plugin-audit,service-analytics)!: the history change note that quotes a stored hash joins the family (#21207)

fix(plugin-audit): a copied decision-audit note withholds the hashes it quotes (#21207)

chore(plugin-audit,metadata-protocol): gate hygiene for the content-hash family (#21207)

test(metadata-protocol): the served-content-hash pin's find double holds the caller's bound (#21207)

test(metadata-protocol): the served-content-hash pin's where-matcher refuses combinators it does not implement (#21207)

fix(metadata-protocol)!: with no crypto provider, version tokens are keyed under a process-scoped ephemeral key, never empty (#21207)

Merge origin/main into claude/issue-21207-exit-two-keyed-served-hash

test(cli): the absent-database audit pin counts every audited table, the decision-audit trail included (#21207)