promote: development history slice 4 - #35

Merged

BeforeLights merged 60 commits into

mainfrom

promote/dev-20260803-04

Aug 3, 2026

Commits on Aug 2, 2026

fix(iam): compare bootstrap rows by owned fields
BeforeLights
committed
e6800db
perf(iam): bound membership reads to organization scope
BeforeLights
committed
b7ee10a
fix(iam): make membership selection deterministic
BeforeLights
committed
26ff403
fix(iam): expire in-memory access tokens
BeforeLights
committed
587eebe
fix(iam): compare-and-set MFA revisions
BeforeLights
committed
e668bd4
fix(iam): use constant-time recovery matching
BeforeLights
committed
6d26ec7
fix(iam): map session persistence failures to unavailable
BeforeLights
committed
a62e515
fix(http): require production CSRF origins
BeforeLights
committed
8ea5ec9
perf(aud): scope chain reads to the target ledger
BeforeLights
committed
8874b36
fix(aud): compare immutable records by owned fields
BeforeLights
committed
463abbb

Commits on Aug 3, 2026

fix(bua): compare immutable records by owned fields
BeforeLights
committed
eb02077
perf(aud): bound append lookups to latest and replay
BeforeLights
committed
ebe73cf
perf(bua): scope usage reads to tenant ancestry
BeforeLights
committed
bb8a11f
fix(bua): enforce terminal reservation transitions
BeforeLights
committed
50e325d
fix(bua): return entitlement problems with HTTP status
BeforeLights
committed
2328dd4
fix(iam): authorize sign-out session ownership
BeforeLights
committed
295b911
fix(iam): map MFA persistence failures to unavailable
BeforeLights
committed
afdd94b
fix(iam): fail closed at device identity API boundary
BeforeLights
committed
5e67f8b
fix(iam): distinguish session authority outages
BeforeLights
committed
7c94a11
test(iam): exercise unsafe principal rejection
BeforeLights
committed
44c1fae
fix(iam): bound session cookie parsing
BeforeLights
committed
868267d
fix(http): bound CSRF cookie parsing
BeforeLights
committed
447b029
fix(iam): enforce narrowest membership authority
BeforeLights
committed
048d5bd
fix(iam): scope membership mutation lookup
BeforeLights
committed
c48aa8b
fix(iam): scope device identity lookups
BeforeLights
committed
4f1b555
fix(aud): map read outages to unavailable
BeforeLights
committed
ead1d27
fix(aud): scope event identity lookup
BeforeLights
committed
ab1e2a6
fix(bua): scope entitlement identity lookups
BeforeLights
committed
e86f7ad
fix(iam): propagate session authority outages
BeforeLights
committed
784fa32
fix(iam): bind sessions to tenant scope
BeforeLights
committed
7b628f2
docs(traceability): reconcile identity foundation coverage
BeforeLights
committed
12b8c3a
docs(git): enforce 30 to 50 commit PR slices
BeforeLights
committed
2c12a91
style(iam): format bootstrap repository
BeforeLights
committed
8e9d753
test(api): register session scope migration
BeforeLights
committed
47db553
test(web): tolerate lazy route startup under load
BeforeLights
committed
d323c02
fix(aud): preserve success responses in OpenAPI
BeforeLights
committed
5d09843
Merge pull request #28 from DatabreezeService/feat/foundation-identity-reconciliation
BeforeLights
authored
7ccbbd1
fix(bua): preserve project usage scopes
BeforeLights
committed
ccbb9d3
fix(bua): transact direct usage persistence
BeforeLights
committed
a8a5a47
fix(http): accept standard cookie names
BeforeLights
committed
0615d54
fix(iam): compose database session context
BeforeLights
committed
1bf5650
fix(iam): require proof before MFA activation
BeforeLights
committed
66a9a56
fix(iam): derive MFA timestamps from server clock
BeforeLights
committed
774d4d5
fix(http): require mutation idempotency keys
BeforeLights
committed
85d60cc
fix(iam): fail closed on missing active refresh token
BeforeLights
committed
cf47989
fix(iam): enforce session inactivity on refresh
BeforeLights
committed
a5478ae
fix(api): expose native refresh response tokens
BeforeLights
committed
0483b4b
fix(iam): type transaction-scoped membership clients
BeforeLights
committed
d83eeb9
fix(iam): resolve personal bootstrap deterministically
BeforeLights
committed
222910a
feat(aud): verify independently paged event digests
BeforeLights
committed
a5ba31b
feat(aud): bind opaque page cursors to tenant scope
BeforeLights
committed
72064d6
feat(aud): paginate public audit reads
BeforeLights
committed
bbca81c
fix(iam): skip malformed membership read rows
BeforeLights
committed
259c92a
test(api): require bearer security on protected operations
BeforeLights
committed
21eb825
docs(review): record PR 29 dispositions
BeforeLights
committed
a17772f
test(aud): type pagination ordering fixtures
BeforeLights
committed
e13e368
test(prisma): inventory BUA project scope migration
BeforeLights
committed
0c86fdc
style(aud): format pagination fixture types
BeforeLights
committed
703cc1f
fix(local): make first-run stack startup reliable
BeforeLights
committed
ad62f45
fix(local): preserve Linux bootstrap line endings
BeforeLights
committed
0617995