fix(auth): bound the per-user lock wait and make closure evidence attributable - #879

Merged

remyluslosius merged 6 commits into

mainfrom

fix/ow-069-073-closure-evidence

Sep 25, 2026

Commits on Sep 25, 2026

fix(auth): bound the per-user lock wait and make closure evidence attributable
remyluslosius
committed
ca0e13b
fix(auth): bound the whole credential operation and correct what the limits claim
remyluslosius
committed
53c6383
fix(auth): bound cookie-session verification and refuse a session revoked during the wait
remyluslosius
committed
b0c3f09
fix(users): answer "not applied" when an admin change never began or rolled back
remyluslosius
committed
4a04697
test(auth): prove the detached rollback is bounded and never changes the reported outcome
remyluslosius
committed
49ff8d4
fix(auth): report a committed admin change truthfully and answer 503 when the role lookup fails
remyluslosius
committed
1f08433