security: complete Phase 1 trust-boundary remediation - #185

Draft

wolverin0 wants to merge 27 commits into

mainfrom

remediation/audit-convergence-20260710

Commits on Jul 11, 2026

test: freeze remediation audit baseline
wolverin0
committed
c06f1b1
fix: stabilize candidate validation ordering
wolverin0
committed
d62262c
feat(auth): add immutable MCP request context
wolverin0
committed
18a4104
fix(mcp): enforce complete tool action registry
wolverin0
committed
cf0a1da
fix(mcp): constrain tenant scope and principal propagation
wolverin0
committed
44d0955
fix(setup): declare local MCP trust mode
wolverin0
committed
304b718
fix(postgres): bind tenant context before connect
wolverin0
committed
a37f517
fix(postgres): add tenant row security policies
wolverin0
committed
4896f16
fix(storage): make claim identities tenant-local
wolverin0
committed
6ccb818
fix(postgres): tenantize the event ledger
wolverin0
committed
93a2d59
fix(postgres): enforce scoped runtime boundaries
wolverin0
committed
f3d9edc
fix(postgres): deny unsupported team surfaces
wolverin0
committed
64ce387
fix(qdrant): quarantine unauthoritative retrieval
wolverin0
committed
eec27ce
fix(security): gate canonical claim envelope
wolverin0
committed
c0ff503
fix(storage): enforce persisted envelope gateway
wolverin0
committed
5755a95
chore(codex): route remediation through custom agents
wolverin0
committed
becbcca
fix(security): harden auxiliary persistence boundaries
wolverin0
committed
d466cd2
fix(security): gate external persistence writers
wolverin0
committed
d2d1a11
fix(security): enforce Atlas persistence envelopes
wolverin0
committed
e537eaa
fix(security): harden bridge persistence transport
wolverin0
committed
a3e3824
fix(security): inventory legacy persistence safely
wolverin0
committed
702b59d

Commits on Jul 12, 2026

fix(deploy): require private authenticated services
wolverin0
committed
a858419
fix(security): bind supply-chain evidence
wolverin0
committed
b71e18f
fix(security): enforce secure Qdrant transport
wolverin0
committed
9b3e16c
fix(integrity): close Phase 1 verification regressions
wolverin0
committed
8d80abb
test(security): align Qdrant ML transport fixture
wolverin0
committed
132e5d0
docs(audit): record Phase 1 budget convergence
wolverin0
committed
95c2b3a

Navigation Menu

security: complete Phase 1 trust-boundary remediation - #185

security: complete Phase 1 trust-boundary remediation#185
wolverin0 wants to merge 27 commits into
mainfrom
remediation/audit-convergence-20260710

Commits on Jul 11, 2026

test: freeze remediation audit baseline

fix: stabilize candidate validation ordering

feat(auth): add immutable MCP request context

fix(mcp): enforce complete tool action registry

fix(mcp): constrain tenant scope and principal propagation

fix(setup): declare local MCP trust mode

fix(postgres): bind tenant context before connect

fix(postgres): add tenant row security policies

fix(storage): make claim identities tenant-local

fix(postgres): tenantize the event ledger

fix(postgres): enforce scoped runtime boundaries

fix(postgres): deny unsupported team surfaces

fix(qdrant): quarantine unauthoritative retrieval

fix(security): gate canonical claim envelope

fix(storage): enforce persisted envelope gateway

chore(codex): route remediation through custom agents

fix(security): harden auxiliary persistence boundaries

fix(security): gate external persistence writers

fix(security): enforce Atlas persistence envelopes

fix(security): harden bridge persistence transport

fix(security): inventory legacy persistence safely

Commits on Jul 12, 2026

fix(deploy): require private authenticated services

fix(security): bind supply-chain evidence

fix(security): enforce secure Qdrant transport

fix(integrity): close Phase 1 verification regressions

test(security): align Qdrant ML transport fixture

docs(audit): record Phase 1 budget convergence