Repository navigation

promote: development history slice 4 - #35

Merged

BeforeLights merged 60 commits into

mainfrom

promote/dev-20260803-04

Aug 3, 2026

Merged

promote: development history slice 4#35
BeforeLights merged 60 commits into
mainfrom
promote/dev-20260803-04

Commits on Aug 2, 2026
- fix(iam): compare bootstrap rows by owned fields
  BeforeLights
  committed
  e6800db
- perf(iam): bound membership reads to organization scope
  BeforeLights
  committed
  b7ee10a
- fix(iam): make membership selection deterministic
  BeforeLights
  committed
  26ff403
- fix(iam): expire in-memory access tokens
  BeforeLights
  committed
  587eebe
- fix(iam): compare-and-set MFA revisions
  BeforeLights
  committed
  e668bd4
- fix(iam): use constant-time recovery matching
  BeforeLights
  committed
  6d26ec7
- fix(iam): map session persistence failures to unavailable
  BeforeLights
  committed
  a62e515
- fix(http): require production CSRF origins
  BeforeLights
  committed
  8ea5ec9
- perf(aud): scope chain reads to the target ledger
  BeforeLights
  committed
  8874b36
- fix(aud): compare immutable records by owned fields
  BeforeLights
  committed
  463abbb
Commits on Aug 3, 2026
- fix(bua): compare immutable records by owned fields
  BeforeLights
  committed
  eb02077
- perf(aud): bound append lookups to latest and replay
  BeforeLights
  committed
  ebe73cf
- perf(bua): scope usage reads to tenant ancestry
  BeforeLights
  committed
  bb8a11f
- fix(bua): enforce terminal reservation transitions
  BeforeLights
  committed
  50e325d
- fix(bua): return entitlement problems with HTTP status
  BeforeLights
  committed
  2328dd4
- fix(iam): authorize sign-out session ownership
  BeforeLights
  committed
  295b911
- fix(iam): map MFA persistence failures to unavailable
  BeforeLights
  committed
  afdd94b
- fix(iam): fail closed at device identity API boundary
  BeforeLights
  committed
  5e67f8b
- fix(iam): distinguish session authority outages
  BeforeLights
  committed
  7c94a11
- test(iam): exercise unsafe principal rejection
  BeforeLights
  committed
  44c1fae
- fix(iam): bound session cookie parsing
  BeforeLights
  committed
  868267d
- fix(http): bound CSRF cookie parsing
  BeforeLights
  committed
  447b029
- fix(iam): enforce narrowest membership authority
  BeforeLights
  committed
  048d5bd
- fix(iam): scope membership mutation lookup
  BeforeLights
  committed
  c48aa8b
- fix(iam): scope device identity lookups
  BeforeLights
  committed
  4f1b555
- fix(aud): map read outages to unavailable
  BeforeLights
  committed
  ead1d27
- fix(aud): scope event identity lookup
  BeforeLights
  committed
  ab1e2a6
- fix(bua): scope entitlement identity lookups
  BeforeLights
  committed
  e86f7ad
- fix(iam): propagate session authority outages
  BeforeLights
  committed
  784fa32
- fix(iam): bind sessions to tenant scope
  BeforeLights
  committed
  7b628f2
- docs(traceability): reconcile identity foundation coverage
  BeforeLights
  committed
  12b8c3a
- docs(git): enforce 30 to 50 commit PR slices
  BeforeLights
  committed
  2c12a91
- style(iam): format bootstrap repository
  BeforeLights
  committed
  8e9d753
- test(api): register session scope migration
  BeforeLights
  committed
  47db553
- test(web): tolerate lazy route startup under load
  BeforeLights
  committed
  d323c02
- fix(aud): preserve success responses in OpenAPI
  BeforeLights
  committed
  5d09843
- Merge pull request #28 from DatabreezeService/feat/foundation-identity-reconciliation
  BeforeLights
  authored
  7ccbbd1
- fix(bua): preserve project usage scopes
  BeforeLights
  committed
  ccbb9d3
- fix(bua): transact direct usage persistence
  BeforeLights
  committed
  a8a5a47
- fix(http): accept standard cookie names
  BeforeLights
  committed
  0615d54
- fix(iam): compose database session context
  BeforeLights
  committed
  1bf5650
- fix(iam): require proof before MFA activation
  BeforeLights
  committed
  66a9a56
- fix(iam): derive MFA timestamps from server clock
  BeforeLights
  committed
  774d4d5
- fix(http): require mutation idempotency keys
  BeforeLights
  committed
  85d60cc
- fix(iam): fail closed on missing active refresh token
  BeforeLights
  committed
  cf47989
- fix(iam): enforce session inactivity on refresh
  BeforeLights
  committed
  a5478ae
- fix(api): expose native refresh response tokens
  BeforeLights
  committed
  0483b4b
- fix(iam): type transaction-scoped membership clients
  BeforeLights
  committed
  d83eeb9
- fix(iam): resolve personal bootstrap deterministically
  BeforeLights
  committed
  222910a
- feat(aud): verify independently paged event digests
  BeforeLights
  committed
  a5ba31b
- feat(aud): bind opaque page cursors to tenant scope
  BeforeLights
  committed
  72064d6
- feat(aud): paginate public audit reads
  BeforeLights
  committed
  bbca81c
- fix(iam): skip malformed membership read rows
  BeforeLights
  committed
  259c92a
- test(api): require bearer security on protected operations
  BeforeLights
  committed
  21eb825
- docs(review): record PR 29 dispositions
  BeforeLights
  committed
  a17772f
- test(aud): type pagination ordering fixtures
  BeforeLights
  committed
  e13e368
- test(prisma): inventory BUA project scope migration
  BeforeLights
  committed
  0c86fdc
- style(aud): format pagination fixture types
  BeforeLights
  committed
  703cc1f
- fix(local): make first-run stack startup reliable
  BeforeLights
  committed
  ad62f45
- fix(local): preserve Linux bootstrap line endings
  BeforeLights
  committed
  0617995

Commits

Commits on Aug 2, 2026

Commits on Aug 3, 2026