fix(auth): fail closed without write-capable admin on public bind - #155

Open

seonghobae wants to merge 20 commits into

mainfrom

fix/issue-78-fail-closed-credentials-20260902-v2

Commits on Sep 1, 2026

fix(auth): fail closed without write-capable admin on public bind
codex
committed
45e33d3
fix(auth): reject unusable bootstrap credentials
codex
committed
bdb5fe6
fix(auth): reject header-ambiguous admin secrets
seonghobae
committed
a2e25b2
docs(security): record research redistribution assessment
seonghobae
committed
4acbcc4
test(auth): strengthen strict admin-token properties
seonghobae
committed
913fc46
test(auth): mirror strict admin-token rejection in fuzz target
seonghobae
committed
2d7d9d9
test(auth): keep fuzz role semantics in sync
seonghobae
committed
1d46ac3
test(auth): property-check credential and RBAC boundary
seonghobae
committed
913b804
test(auth): exercise fuzz invariants for arbitrary bytes
seonghobae
committed
30771a5
fix(auth): align health and write denial auth semantics
codex
committed
3346686
test(auth): reject fixed smoke administrator credential
seonghobae
committed
f480d48
fix(auth): mint ephemeral smoke administrator credential
seonghobae
committed
f2f591e
docs(security): preserve fail-closed auth traceability
seonghobae
committed
efca66a
test(auth): bind smoke token generation to forwarding
seonghobae
committed
78b21b9
docs(auth): retain redistributable NIST SSDF evidence
seonghobae
committed
0af8f83
merge: synchronize fail-closed management auth with protected main
seonghobae
committed
6d99ed7
docs(auth): preserve external-secret deployment lifecycle after restack
seonghobae
committed
6b0898c
docs(security): reconcile NIST artifact provenance
seonghobae
committed
e6f05d7

Commits on Sep 4, 2026

chore: integrate protected main into fail-closed auth
seonghobae
committed
f74ff25

Commits on Sep 6, 2026

merge(main): adopt protected anti-bot boundary into fail-closed auth
seonghobae
committed
fb93b61