feat: Phase 07 — Titanium Licensing auth cutover#40

Merged

finedesignz merged 27 commits into

mainfrom

phase-07-titanium-auth-cutover

May 26, 2026

Commits on May 25, 2026

Commits on May 26, 2026

chore(07): add titanium env keys for keygen product+policy
finedesignz
committed
feat(07-B): additive schema migration + dal for titanium auth
finedesignz
committed
feat(07-A): titanium-client foundation (jose JWKS + EdDSA verify + redis blocklist)
finedesignz
committed
feat(07-D): license gating middleware + optional webhook receiver

finedesignz
and
claude
committed
feat(07-C): login + opaque sessions + csrf + re-auth + dual-auth shim
finedesignz
committed
feat(07-E): user migration script (titanium subject linking + magic-link bootstrap)
finedesignz
committed
feat(07-G): security hardening (rate limits + headers + jti hard-fail + audit log + force reissue)
finedesignz
committed
feat(07-F): magic-link login UI + csrf header + license badge

finedesignz
and
claude
committed
docs(07-I): test matrix + rollout runbook + integration smoke

finedesignz
and
claude
committed
docs(07-J): reusable titanium auth cutover template

finedesignz
and
claude
committed
chore(07-H): dead-code audit + docs + license-status endpoint
finedesignz
committed
docs: sync openapi for phase 07 endpoints
finedesignz
committed
chore(07): provision keygen licenses for prod users

finedesignz
and
claude
committed
merge: origin/main into phase-07 — resolve schema + App + Layout + WS conflicts

finedesignz
and
claude
committed