fix: harden credential and runtime trust boundaries (rebase of #916) - #936

Merged

lidge-jun merged 6 commits into

devfrom

codex/916-trust-boundaries

Aug 6, 2026

Commits on Aug 3, 2026

fix(google): validate Vertex location before ADC auth

Ingwannu
authored and
lidge-jun
committed
7b82b16
fix: harden local credential and runtime boundaries

Ingwannu
authored and
lidge-jun
committed
ee14555
fix(claude): narrow the no-context fallback to the destination slot
lidge-jun
committed
d8d0b2f
fix(claude): restore fail-closed credential stripping, and pin why
lidge-jun
committed
727722c

Commits on Aug 6, 2026