UDS server-side trust-boundary hardening (0.3.3) - #13

Merged

vr000m merged 24 commits into

mainfrom

feature/uds-trust-boundary-hardening

Jun 28, 2026

Commits on Jun 27, 2026

docs: add reviewed dev plan for UDS server-side trust-boundary hardening
vr000m
committed
0a2e258
docs: harden UDS trust-boundary plan per Codex review
vr000m
committed
5059610
conduct: phase 1 — Parent-directory enforcement
vr000m
committed
839e718
conduct: phase 2 — Peer-credential resolver
vr000m
committed
49b34dc
conduct: phase 3 — Wire peer-cred into the handshake
vr000m
committed
7773c79
conduct: phase 4 — Local end-to-end smoke (multi-connection + cross-uid)
vr000m
committed
35de5ec
conduct: phase 5 — Docs + plan/README sync
vr000m
committed
37aa5f2
feat: onboard backend extras via just stt-install/stt-enable
vr000m
committed
f1f62cf
feat: actionable error when a backend's optional extra is missing
vr000m
committed
ee1e66e
fix: make cross-uid peercred smoke actually reach the gate
vr000m
committed
0d9410e
chore(release): prepare 0.3.3 (UDS trust-boundary hardening)
vr000m
committed
f9e8cdf
test: add stdlib cross-uid peer-cred verifier (nobody, no venv)
vr000m
committed
9b167e3
docs: record cross-uid peer-cred verification (real foreign uid)
vr000m
committed
16cccea
test: narrow Koda-surface guard to imported surface; repoint per-ASR mirror
vr000m
committed
ed7a9c2
fix: address code-review findings (peer-cred unsigned uid, ImportError gap, probe parity)
vr000m
committed
2d87e46

Commits on Jun 28, 2026