Skip to content

feat(console): expose bounded recovery confirmation read - #335

Merged
Pigbibi merged 1 commit into
mainfrom
codex/recovery-controller-confirmation-read
Aug 30, 2026
Merged

feat(console): expose bounded recovery confirmation read#335
Pigbibi merged 1 commit into
mainfrom
codex/recovery-controller-confirmation-read

Conversation

@Pigbibi

@Pigbibi Pigbibi commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add a dedicated, token-separated service-to-service read for the current recovery confirmation
  • return only fresh redacted candidate/dual-review bindings and the immutable non-executable confirmation
  • reject missing, wrong, or source-token-reused controller credentials

Safety boundary

The endpoint is read-only. It neither accesses broker state nor grants execution authority. A platform controller must independently recheck broker receipts, dual-review evidence and atomically compare current target state before any recovery transition.

Validation

  • node --check web/strategy-switch-console/worker.js
  • rtk test node tests/strategy_switch_worker_validation.mjs
  • git diff --check

Co-Authored-By: Codex <noreply@openai.com>
@Pigbibi
Pigbibi merged commit d9e67a3 into main Aug 30, 2026
6 checks passed
@Pigbibi
Pigbibi deleted the codex/recovery-controller-confirmation-read branch August 30, 2026 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant