feat(auth): enforce fail-closed protected authorization - #4774

Closed

cea-block wants to merge 19 commits into

cea/o3-enterprise-identity-frozen-basefrom

cea/o4-fail-closed-protected-authorization

Commits on Aug 4, 2026

fix(auth): reject ambiguous protected identity evidence
cea-block
committed
a95deba
fix(auth): bound assertion time and clock skew
cea-block
committed
b199b6b
fix(relay): bound JWKS degradation and metrics
cea-block
committed
a137cac
feat(db): persist protected object authority
cea-block
committed
eedb356
feat(relay): couple protected media git and audio transports
cea-block
committed
ac767fc
fix(relay): enforce the protected route inventory
cea-block
committed
66c699a
feat(auth): converge revocation and invalidation
cea-block
committed
19524a3
fix(auth): enforce server-owned enrollment policy
cea-block
committed
df4efac
feat(auth): install typed provider provenance
cea-block
committed
d329388
fix(auth): implement deny-protected fail-safe mode
cea-block
committed
6298645
feat(auth): persist current client status projections
cea-block
committed
592f267
feat(relay): expose production authorization reachability
cea-block
committed
3a682c6
test(auth): publish hosted O4 conformance selection
cea-block
committed
a8f3795
test(auth): expose shared contract gaps
cea-block
committed
9e670f6
fix(auth): bind delegation and session revisions
cea-block
committed
75e3ff9
fix(auth): update focused test adapters
cea-block
committed
b3d3b1d
fix(auth): update deny test provider
cea-block
committed
872e1b5
test(auth): align authorization fixtures
cea-block
committed
06ff634
chore(desktop): apply Tauri formatting
cea-block
committed
54d2c31