fix(auth): fail closed without write-capable admin on public bind - #138

Merged

seonghobae merged 18 commits into

fix/pin-hosted-runner-20260902-v3from

fix/issue-78-fail-closed-credentials-20260901

Sep 2, 2026

Commits on Sep 1, 2026

fix(auth): fail closed without write-capable admin on public bind
codex
committed
45e33d3
fix(auth): reject unusable bootstrap credentials
codex
committed
bdb5fe6
fix(auth): reject header-ambiguous admin secrets
seonghobae
committed
a2e25b2
docs(security): record research redistribution assessment
seonghobae
committed
4acbcc4
test(auth): strengthen strict admin-token properties
seonghobae
committed
913fc46
test(auth): mirror strict admin-token rejection in fuzz target
seonghobae
committed
2d7d9d9
test(auth): keep fuzz role semantics in sync
seonghobae
committed
1d46ac3
test(auth): property-check credential and RBAC boundary
seonghobae
committed
913b804
test(auth): exercise fuzz invariants for arbitrary bytes
seonghobae
committed
30771a5
fix(auth): align health and write denial auth semantics
codex
committed
3346686
test(auth): reject fixed smoke administrator credential
seonghobae
committed
f480d48
fix(auth): mint ephemeral smoke administrator credential
seonghobae
committed
f2f591e
docs(security): preserve fail-closed auth traceability
seonghobae
committed
efca66a
test(auth): bind smoke token generation to forwarding
seonghobae
committed
78b21b9
docs(auth): retain redistributable NIST SSDF evidence
seonghobae
committed
0af8f83
merge: synchronize fail-closed management auth with protected main
seonghobae
committed
6d99ed7
docs(auth): preserve external-secret deployment lifecycle after restack
seonghobae
committed
6b0898c
docs(security): reconcile NIST artifact provenance
seonghobae
committed
e6f05d7

Navigation Menu

Uh oh!

fix(auth): fail closed without write-capable admin on public bind - #138

fix(auth): fail closed without write-capable admin on public bind#138
seonghobae merged 18 commits into
fix/pin-hosted-runner-20260902-v3from
fix/issue-78-fail-closed-credentials-20260901

Commits on Sep 1, 2026

fix(auth): fail closed without write-capable admin on public bind

fix(auth): reject unusable bootstrap credentials

fix(auth): reject header-ambiguous admin secrets

docs(security): record research redistribution assessment

test(auth): strengthen strict admin-token properties

test(auth): mirror strict admin-token rejection in fuzz target

test(auth): keep fuzz role semantics in sync

test(auth): property-check credential and RBAC boundary

test(auth): exercise fuzz invariants for arbitrary bytes

fix(auth): align health and write denial auth semantics

test(auth): reject fixed smoke administrator credential

fix(auth): mint ephemeral smoke administrator credential

docs(security): preserve fail-closed auth traceability

test(auth): bind smoke token generation to forwarding

docs(auth): retain redistributable NIST SSDF evidence

merge: synchronize fail-closed management auth with protected main

docs(auth): preserve external-secret deployment lifecycle after restack

docs(security): reconcile NIST artifact provenance