feat(governed): enforce signed decisions on transfers - #39
Merged
Merged
Conversation
Preservation snapshot of uncommitted working-tree work (repo survey 2026-08-02). WIP branch — do NOT push directly; split into reviewed PRs first. Build scratch excluded via .gitignore. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…ications M5: a verified governed envelope (frame, stream INIT, or event) was a bearer capability with no receiver-side replay protection — any peer that observed one could re-send the exact bytes within the 5-minute intent TTL, producing duplicate authorized deliveries/publications and re-charging the signing agent's quota (cross-agent grief) plus provenance confusion. Add a bounded per-receiver replay guard keyed on the signature-authenticated (tenant, agent, intent-id), TTL = the intent's own ExpiresAt, checked at the single admit/govern chokepoint before quota and before the side effect. A legitimate retry carries a fresh intent (fresh nonce/id), so this rejects only true replays — full governed stream/publish suites still pass. Regression tests added. SECURITY_REVIEW_v1.14 M5. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Verification