Skip to content

security: bind private evidence publication to directory identity #228

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
seonghobae merged 21 commits into from
Aug 24, 2026
Merged

security: bind private evidence publication to directory identity #228

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
04939f0
test: prove private evidence parent replacement race
seonghobae Aug 15, 2026
4a5bec7
fix: bind private evidence writes to opened parent
seonghobae Aug 15, 2026
b22780d
test: prove private evidence parent permission drift
seonghobae Aug 15, 2026
a17f460
fix: revalidate private evidence parent permissions
seonghobae Aug 15, 2026
fbac0ed
test: preserve replaced private evidence on failed cleanup
seonghobae Aug 15, 2026
7bb72ed
security: preserve identity-mismatched evidence replacements
seonghobae Aug 15, 2026
d00128f
security: invalidate failed evidence through opened descriptor
seonghobae Aug 15, 2026
f760b74
test: prove private evidence mode survives restrictive umask
seonghobae Aug 16, 2026
706da5b
fix: normalize private evidence mode after open
seonghobae Aug 16, 2026
2d1f018
test: isolate restrictive umask to record creation
seonghobae Aug 16, 2026
91d2a44
test: cover post-create parent replacement
seonghobae Aug 16, 2026
ce17c7a
refactor: centralize private parent validation
seonghobae Aug 16, 2026
18c99bc
merge: advance private evidence authority onto current audit primitive
seonghobae Aug 20, 2026
3a8d059
merge: advance private evidence authority onto current audit authorit…
seonghobae Aug 20, 2026
173f68d
fix(stack): preserve current audit root in private evidence owner
seonghobae Aug 20, 2026
5c44aa7
merge: advance private evidence authority onto current audit root
seonghobae Aug 20, 2026
017d61b
test: expose pre-open private evidence parent race
seonghobae Aug 20, 2026
cf9b8d0
fix: bind private evidence parent before canonicalization
seonghobae Aug 20, 2026
33a9383
refactor: expose object-bound evidence publication primitive
seonghobae Aug 20, 2026
51b5848
test: expose shared object-bound publication seam
seonghobae Aug 20, 2026
1eb947e
fix: use C-compatible private evidence mode argument
seonghobae Aug 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading