feat(gateway): trust forwarded IPs only from trusted proxies - #148

Closed

seonghobae wants to merge 23 commits into

fix/pin-hosted-runner-20260902-v2from

feat/trusted-proxy-admission-v2

Commits on Aug 30, 2026

feat(gateway): trust forwarded IPs only from trusted proxies
codex
committed
d0914ae
fix(gateway): harden trusted proxy attribution
codex
committed
6fd62a7
test(gateway): fuzz trusted forwarded client attribution
codex
committed
6cfec21
fix(gateway): accept mapped trusted proxy peers
codex
committed
b009e87
test(gateway): align mapped proxy trust invariants
codex
committed
b92c55b
docs(gateway): clarify trusted proxy runtime contract
codex
committed
66dbfd0
fix(gateway): reject invalid mapped proxy cidrs
codex
committed
82caad0
Merge origin/main into codex/trusted-proxy-admission
codex
committed
bcbb901

Commits on Aug 31, 2026

Merge origin/main into codex/trusted-proxy-admission
codex
committed
4a3d452

Commits on Sep 1, 2026

fix(gateway): keep admin credential provenance accurate
seonghobae
committed
597e723
test(gateway): run trusted-proxy fuzz target in CI
seonghobae
committed
629afc0
style: apply rustfmt to credential regression
seonghobae
committed
a183581
merge: synchronize trusted-proxy admission with protected main
seonghobae
committed
97d9c4b
chore(stack): integrate pinned hosted-runner prerequisite
seonghobae
committed
72ac1a2
chore(stack): converge trusted-proxy slice on current runner prerequisite
seonghobae
committed
84c5fe3
test(fuzz): seed trusted-forwarding parser corpus
seonghobae
committed
4f7bda1
test(fuzz): seed IPv6 forwarding chain
seonghobae
committed
9935392
test(fuzz): seed IPv4-mapped forwarding chain
seonghobae
committed
c6b34d7
test(fuzz): seed malformed forwarding chain
seonghobae
committed
0d05448
merge: converge trusted-proxy stack on current runner prerequisite
seonghobae
committed
00e9857
test(gateway): fail closed on malformed forwarded chains
seonghobae
committed
c443c80
test(gateway): make fuzz oracle reject malformed forwarding
seonghobae
committed
a975edd
test(gateway): fail closed in trusted-forwarding property model
seonghobae
committed
2ce8384