Verify API contracts and live deployment identity - #28

Merged

lgoyal6 merged 12 commits into

mainfrom

codex/close-strengthening-gaps

Sep 7, 2026

Commits on Sep 7, 2026

Enforce revocation before protected actions
lgoyal6
committed
9ec253a
Release idle tenant concurrency gates
lgoyal6
committed
464b0e6
Quarantine ambiguous outbox deliveries
lgoyal6
committed
4834a9e
Add recoverable Cloud Run rollout plans
lgoyal6
committed
75eb89d
Document authorization and contract test limits
lgoyal6
committed
8033709
test(admin): run Schemathesis against live contract
lgoyal6
committed
126e3ac
fix(deploy): probe Cloud Run canaries with active identity
lgoyal6
committed
99136d3
ci(identity): verify GitHub OIDC least privilege
lgoyal6
committed
3f63b56
fix(identity): inspect exchanged token lifetime
lgoyal6
committed
0eceebd
fix(identity): exclude deliberate key fixtures
lgoyal6
committed
bcb4ff6
docs(identity): make live OIDC proof reusable
lgoyal6
committed
c0896ec
test(secrets): allow disposable contract-test token
lgoyal6
committed
87f28af