Skip to content

Fix concurrent resolution ownership and make the portfolio demo reproducible - #28

Open
kamjcx wants to merge 1 commit into
mainfrom
codex/portfolio-audit-20260909
Open

kamjcx wants to merge 1 commit into
mainfrom
codex/portfolio-audit-20260909

Conversation

@kamjcx

@kamjcx kamjcx commented Sep 8, 2026

Copy link
Copy Markdown
Owner

Concurrent public and debug requests for one ID could leave a successful resolution without an authorization owner. Share the scoped lock and reserve debug ownership before execution; cover both execution orders and tenant scopes.

Align the default dashboard with the public response contract: remove unusable admin tabs and fabricated zero diagnostics, show decision messages and source evidence, add three bundled examples, and clear stale results during requests. Update the 90-second walkthrough and record the audit.

Validation: original 587 tests passed after the fix (86.91% branch coverage), four new concurrency tests passed, Ruff and mypy passed. Independent reviewer verified all four race interleavings. Desktop and 390x844 browser checks covered qualified match, missing route, evidence expansion and safe refusal. Docker/image scans were not rerun locally; existing Python 3.14 dependency/harness warnings are documented.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant