fix: correctness and fail-closed gaps - #63

Merged

shaneutt merged 21 commits into

praxis-proxy:mainfrom

araujof:feat/improvements

Sep 2, 2026

Commits on Sep 1, 2026

fix(cel): keep whole-valued floats as doubles

shaneutt
authored and
araujof
committed
5aef60b
fix(opa): reject inline modules sharing a global package subtree

shaneutt
authored and
araujof
committed
57857fc
fix(identity-jwt): redact secrets in Debug, accept any Bearer casing

shaneutt
authored and
araujof
committed
3b3fee3
fix(valkey): alarm on a timed-out TTL refresh

shaneutt
authored and
araujof
committed
b7ad8ff
fix(core): compare every authority field in chain_extends

shaneutt
authored and
araujof
committed
fc5bba0
fix(core): synthesize a deny when a blocking plugin attaches no violation

shaneutt
authored and
araujof
committed
bca0e8a
fix(apl-runtime): track http and custom writes in extensions_changed

shaneutt
authored and
araujof
committed
1589b1b
fix(core): reject unknown keys in attenuation config

shaneutt
authored and
araujof
committed
205469b
fix(core): serialize delegated_tokens with a non-string key

shaneutt
authored and
araujof
committed
c989441
fix(core): stop merge_security dropping an append-only plugin's labels

shaneutt
authored and
araujof
committed
9a9c3ca
fix(apl-core): fail closed when a parallel branch panics

shaneutt
authored and
araujof
committed
f6e06e9
fix(core): validate authentication step names at load

araujof
and
shaneutt
committed
74f9f4d
test(apl-core): pin duplicate field-pipeline key rejection

araujof
and
shaneutt
committed
9af88c4
fix(apl-core): fan field pipelines out over arrays on the path

araujof
and
shaneutt
committed
cc68b66
fix(apl): reject more than one elicitation per phase

araujof
and
shaneutt
committed
22de41f

Commits on Sep 2, 2026

docs: tighten comments added by the #54 port
araujof
committed
74d41c1
test: declare the plugins that authentication steps name
araujof
committed
a9aee3b
style: wrap an over-width const in the authentication fixture
araujof
committed
c760cc6
docs: condense comments across the #54 port
araujof
committed
688ca15
docs: keep the invariants the condensing dropped
araujof
committed
08b76e6
chore: ignore macOS .DS_Store files
araujof
committed
b57f539

Navigation Menu

Uh oh!

fix: correctness and fail-closed gaps - #63

fix: correctness and fail-closed gaps#63
shaneutt merged 21 commits into
praxis-proxy:mainfrom
araujof:feat/improvements

Commits on Sep 1, 2026

fix(cel): keep whole-valued floats as doubles

fix(opa): reject inline modules sharing a global package subtree

fix(identity-jwt): redact secrets in Debug, accept any Bearer casing

fix(valkey): alarm on a timed-out TTL refresh

fix(core): compare every authority field in chain_extends

fix(core): synthesize a deny when a blocking plugin attaches no violation

fix(apl-runtime): track http and custom writes in extensions_changed

fix(core): reject unknown keys in attenuation config

fix(core): serialize delegated_tokens with a non-string key

fix(core): stop merge_security dropping an append-only plugin's labels

fix(apl-core): fail closed when a parallel branch panics

fix(core): validate authentication step names at load

test(apl-core): pin duplicate field-pipeline key rejection

fix(apl-core): fan field pipelines out over arrays on the path

fix(apl): reject more than one elicitation per phase

Commits on Sep 2, 2026

docs: tighten comments added by the #54 port

test: declare the plugins that authentication steps name

style: wrap an over-width const in the authentication fixture

docs: condense comments across the #54 port

docs: keep the invariants the condensing dropped

chore: ignore macOS .DS_Store files