Meta Vens
963150f537
Audit events never carry a completion code ...
Soul pass 5, S5-3: auth_completion_created stored completion.code, which
the unauthenticated redeem route turns into the session until it expires
(300 s by default), so the audit trail could redeem a live sign-in. The
two auth_completion_redeemed events (the HTTP redeem route and the private
command plane's redeem by attempt) stored the spent code as well.
All three payloads drop it. Nothing reads audit payloads back: the store
has no audit read, and no repository indexed by VoidBot consumes these
events. The event's sessionId already names the completion (one per
callback), so no replacement key is added. This matches Heimdall's own
witness contract, which says codes are redacted from audit exports.
Tests drive a sign-in through the HTTP redeem route and through the plane,
pin each payload exactly, and check the code appears in no audit event.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 18:56:35 +02:00
Schema check: keys as the store relies on them, typed columns, per-table privileges
2026-09-30 18:55:45 +02:00
Add Eve access plugin and private auth plane
2026-08-22 00:44:57 +02:00
Close the three one-line holes Soul left as follow-ups
2026-09-08 15:08:38 +02:00
Close the three one-line holes Soul left as follow-ups
2026-09-08 15:08:38 +02:00
Audit events never carry a completion code
2026-09-30 18:56:35 +02:00
Backend handoff failure names the status, never the app's answer
2026-09-30 17:07:45 +02:00
Relayed provider errors are printable, bounded and inert in the page
2026-09-30 15:49:30 +02:00
Make app capability rules data instead of code
2026-09-06 23:58:58 +02:00
R21.3: delete the unreachable registered-app resolution path
2026-09-08 14:51:23 +02:00
Signing key path: absolute only, and no error carries the path
2026-09-30 14:40:07 +02:00
Delete claims/issue: zero callers, arbitrary-facts oracle bypassing entitlement evaluation
2026-09-08 13:53:09 +02:00
readSecretInput: never print the path, refuse relative paths and blank secrets
2026-09-30 13:50:53 +02:00
Add read-only Heimdall Eve witness advertisement
2026-06-03 03:21:31 +01:00
Expose provider health public identity
2026-08-22 02:35:20 +02:00
Normalize Heimdall claim fact vocabulary
2026-04-26 14:58:58 +01:00
Publish runtime presence in the contract Odin admits
2026-09-07 22:19:51 +02:00
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
Publish runtime presence in the contract Odin admits
2026-09-07 22:19:51 +02:00
Private command diagnostics carry class and code, never a message
2026-09-30 17:07:16 +02:00
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
Audit events never carry a completion code
2026-09-30 18:56:35 +02:00
Add Eve access plugin and private auth plane
2026-08-22 00:44:57 +02:00
Retract the CultLib divergence claim; read each .cc with the right client
2026-09-06 19:11:19 +02:00
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
Read every secret input from a credential file named by NAME_FILE
2026-09-30 12:30:57 +02:00
Publish runtime presence in the contract Odin admits
2026-09-07 22:19:51 +02:00
Signing key path: absolute only, and no error carries the path
2026-09-30 14:40:07 +02:00
Register apps at runtime instead of at build time
2026-09-07 00:11:41 +02:00
Honour the Idunn process write lease, and stop claiming active while warming
2026-09-06 02:25:38 +02:00
Register apps at runtime instead of at build time
2026-09-07 00:11:41 +02:00
963150f537