feat(auth): Authlib OAuth 2.1 core + S154 P0 repair — dark by default - #346

Draft

creator35lwb-web wants to merge 16 commits into

mainfrom

feat/registration-auth-gate

Commits on Aug 28, 2026

feat(byok): add Groq qwen/qwen3.8-27b to the BYOK catalog (currency sweep)

creator35lwb-web
and
claude
committed
b5d53be

Commits on Aug 30, 2026

test(currency): advance green-fixture day to the newest verification date

creator35lwb-web
and
claude
committed
c8d1e8c

Commits on Aug 31, 2026

feat(auth): registration gate for tool execution - dark by default

creator35lwb-web
and
claude
committed
18f380e
feat(auth): Design v2 - OAuth 2.1 spine, boundary challenge, evidence ladder

creator35lwb-web
and
claude
committed
6ab7e32
policy(privacy): name Brevo as the verification-mail processor (EN+BM)

creator35lwb-web
and
claude
committed
5f9b83d

Commits on Sep 1, 2026

feat(auth): Authlib OAuth core + S154 P0 repair (D-ALTON-AUTHLIB)

creator35lwb-web
and
claude
committed
2f44433
fix(auth): close the four CS safe-to-stage BOUNDED-HOLD findings

creator35lwb-web
and
claude
committed
7a0c462

Commits on Sep 2, 2026

fix(gate): one exhaustive denial decision + verbatim third-party license evidence (T S156)

creator35lwb-web
and
claude
committed
d125bce

Commits on Sep 3, 2026

Commits on Sep 5, 2026

Commits on Sep 6, 2026

fix(identity): save-time refresh containment, ABA-safe claim lifecycle, resumable erasure, honest uniform storage outages (CS round 5 / T S159)

creator35lwb-web
and
claude
committed
84fd926

Commits on Sep 8, 2026