Meta Vens
55732a901d
Presence: the publisher sequence is in-process, the state root keeps no owner-only file, an Idunn generation never self-enrolls ...
nextPublisherSequence read and rewrote <dataRoot>/runtime-presence-sequence at
mode 0600, which the next generation (a fresh DynamicUser uid in the shared
state group) cannot open. Odin compares publisher_sequence only within one
activation and Idunn mints a new activation per start, so PublisherSequence
derives it from the observation clock, never below the previous value plus
one, as Muninn does. openProviderHealthIdentity under
GAMECULT_IDUNN_RUNTIME_BUNDLE now refuses when the presence descriptor is
absent instead of enrolling an identity Idunn does not trust.
Adds the cross-generation test (root only) and the sequence, no-dataRoot and
missing-descriptor tests.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-23 14:25:11 +02:00
Presence: the publisher sequence is in-process, the state root keeps no owner-only file, an Idunn generation never self-enrolls
2026-10-23 14:25:11 +02:00
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
Pin the year boundary, the typed exchange failure and the start refusal's code
2026-10-19 14:45:35 +02:00
Resume browser sign-in by attempt id, not the completion code
2026-09-23 20:50:28 +02:00
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
Make app capability rules data instead of code
2026-09-06 23:58:58 +02:00
readSecretInput: never print the path, refuse relative paths and blank secrets
2026-09-30 13:50:53 +02:00
Every start connects to Postgres; pin the signing key's read refusal
2026-09-30 15:30:10 +02:00
Test: malformed URL must not reach a sibling prefix's not-found handler (GHSA-p68q-wchp-6fh7)
2026-10-22 21:00:46 +02:00
Move the private command port with the candidate
2026-09-06 22:15:34 +02:00
Publish runtime presence in the contract Odin admits
2026-09-07 22:19:51 +02:00
Code exchange: a rotating provider's grant without a refresh token fails the callback
2026-10-19 14:35:11 +02:00
Give Heimdall Odin documents unique catalog keys
2026-08-22 03:47:02 +02:00
Presence: the publisher sequence is in-process, the state root keeps no owner-only file, an Idunn generation never self-enrolls
2026-10-23 14:25:11 +02:00
Tests: refresh failures surface as the typed ManagedCredentialRefreshFailed; seven providers
2026-10-19 11:20:18 +02:00
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
Pin the year boundary, the typed exchange failure and the start refusal's code
2026-10-19 14:45:35 +02:00
Presence: the publisher sequence is in-process, the state root keeps no owner-only file, an Idunn generation never self-enrolls
2026-10-23 14:25:11 +02:00
Recipe test: explore loadConfig as Idunn starts Heimdall
2026-09-30 22:52:40 +02:00
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
Presence: the publisher sequence is in-process, the state root keeps no owner-only file, an Idunn generation never self-enrolls
2026-10-23 14:25:11 +02:00
Refresh managed credentials under a row lock, with typed revocation
2026-10-19 11:11:34 +02:00
Tests: refresh failures surface as the typed ManagedCredentialRefreshFailed; seven providers
2026-10-19 11:20:18 +02:00
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
55732a901d