fix: correctness and fail-closed gaps - #63
Open
araujof wants to merge 20 commits into
Open
DCO-2 / DCO
succeeded
Sep 2, 2026 in 1s
Check passed!
All commits are signed off, the check passed.
Summary
| Sha | Message | Pass or fail reason | |
|---|---|---|---|
| 🟢 | 5aef60b | fix(cel): keep whole-valued floats as doubles | Valid sign-off found |
| 🟢 | 57857fc | fix(opa): reject inline modules sharing a global p... | Valid sign-off found |
| 🟢 | 3b3fee3 | fix(identity-jwt): redact secrets in Debug, accept... | Valid sign-off found |
| 🟢 | b7ad8ff | fix(valkey): alarm on a timed-out TTL refresh | Valid sign-off found |
| 🟢 | fc5bba0 | fix(core): compare every authority field in chain_... | Valid sign-off found |
| 🟢 | bca0e8a | fix(core): synthesize a deny when a blocking plugi... | Valid sign-off found |
| 🟢 | 1589b1b | fix(apl-runtime): track http and custom writes in ... | Valid sign-off found |
| 🟢 | 205469b | fix(core): reject unknown keys in attenuation conf... | Valid sign-off found |
| 🟢 | c989441 | fix(core): serialize delegated_tokens with a non-s... | Valid sign-off found |
| 🟢 | 9a9c3ca | fix(core): stop merge_security dropping an append-... | Valid sign-off found |
| 🟢 | f6e06e9 | fix(apl-core): fail closed when a parallel branch ... | Valid sign-off found |
| 🟢 | 74f9f4d | fix(core): validate authentication step names at l... | Valid sign-off found |
| 🟢 | 9af88c4 | test(apl-core): pin duplicate field-pipeline key r... | Valid sign-off found |
| 🟢 | cc68b66 | fix(apl-core): fan field pipelines out over arrays... | Valid sign-off found |
| 🟢 | 22de41f | fix(apl): reject more than one elicitation per pha... | Valid sign-off found |
| 🟢 | 74d41c1 | docs: tighten comments added by the #54 port | Valid sign-off found |
| 🟢 | a9aee3b | test: declare the plugins that authentication step... | Valid sign-off found |
| 🟢 | c760cc6 | style: wrap an over-width const in the authenticat... | Valid sign-off found |
| 🟢 | 688ca15 | docs: condense comments across the #54 port | Valid sign-off found |
| 🟢 | 08b76e6 | docs: keep the invariants the condensing dropped | Valid sign-off found |
Loading