Topic/review findings - #3

Merged

wistefan merged 41 commits into

mainfrom

topic/review-findings

Aug 28, 2026

Commits on Aug 27, 2026

fix(consent): key the credential cache on the full credential identity (C-3)

wistefan
and
claude
committed
7234f89
fix(plugin)!: remove the legacy JWT-subject mode; require an OwnerResolver (C-1)

wistefan
and
claude
committed
18fccf4
fix(consent): scope the consent match to the consuming participant and purpose (C-2)

wistefan
and
claude
committed
06fe591
fix(plugin): fail closed when the exchange parties cannot be resolved (H-1)

wistefan
and
claude
committed
4728098
fix(plugin)!: default to fail-closed and never fail open on misconfiguration (H-2)

wistefan
and
claude
committed
7e988b1
fix(plugin): bound the request-context store and stop retaining bearer tokens (H-3)

wistefan
and
claude
committed
be85548
docs: rewrite README and CLAUDE.md against the real config; guard drift in CI (C-4)

wistefan
and
claude
committed
a1eea8e
fix(plugin): never fail open on a consumer missing from the participant registry (H-1/H-2)

wistefan
and
claude
committed
258a1c1
test: cover the owner-resolver path and gate coverage in CI (H-4)

wistefan
and
claude
committed
57b0e06
perf(plugin): bound the response-phase fan-out (H-5)

wistefan
and
claude
committed
1f79e03
fix(plugin): strip upstream headers from the denial response (M-1)

wistefan
and
claude
committed
cfd7501
fix(config): reject a configuration that cannot authenticate or address the API (M-2)

wistefan
and
claude
committed
043bc00
fix(audit): make the access record complete, flushed and safe to export (M-3)

wistefan
and
claude
committed
025113e
fix(plugin): traverse arrays in the consumer claim path (M-4)

wistefan
and
claude
committed
ad39a25
refactor(logging): leveled, redacted, rate-limited logging (M-5)

wistefan
and
claude
committed
51802f1
fix(dev): make `docker compose up` actually work (M-6)

wistefan
and
claude
committed
36e3f7b
ci: pin the scanners and let them fail the build (M-7)

wistefan
and
claude
committed
0573e31
refactor: delete the dead field-filtering model (L-1)

wistefan
and
claude
committed
cc58f0c
docs: fix package docs that contradicted the behaviour (L-2)

wistefan
and
claude
committed
a7a18d4
build: harden the runtime image (L-3)

wistefan
and
claude
committed
7c50c72
build(deps): refresh direct dependencies and add Dependabot (L-4)

wistefan
and
claude
committed
18354df
fix(plugin): stop marking every allowed response as modified (L-5)

wistefan
and
claude
committed
9077f66
feat(metrics): expose the gate's operational signals (L-6)

wistefan
and
claude
committed
2c19114
fix(config): bound participant_token_ttl so it cannot overflow (L-7)

wistefan
and
claude
committed
e5e65da
docs: add SECURITY.md and CODEOWNERS (L-8)

wistefan
and
claude
committed
5a6f8c9
docs: document the local Go toolchain requirement (L-9)

wistefan
and
claude
committed
e7b4f52
fix(plugin): cap the payload forwarded to the OwnerResolver (L-10)

wistefan
and
claude
committed
3f6698d
fix(ownerresolver): distinguish an unreadable payload from no payload (L-11)

wistefan
and
claude
committed
6528a89
chore: keep review.md out of the repository

wistefan
and
claude
committed
46a6614
test: cover the phase-correlation gap (§5)

wistefan
and
claude
committed
0048714
fix: run the audit flush after the runner returns, not beside it (N-1)

wistefan
and
claude
committed
77f8aff
fix(plugin): rank a definite deny above a dependency error (N-2)

wistefan
and
claude
committed
f73812b
perf(plugin): amortise the request-context overflow eviction (N-3)

wistefan
and
claude
committed
29c58c8
test(plugin): make the N-2 ranking test deterministic

wistefan
and
claude
committed
acdb6b6
feat(plugin): surface and optionally require purpose scoping (N-4)

wistefan
and
claude
committed
8d196d3
fix(consent): keep dependency response bodies out of errors that escape (N-5)

wistefan
and
claude
committed
192aa72
fix(metrics): declare counters as counters and give every family a HELP (N-6)

wistefan
and
claude
committed
afb0003
test: close the residual coverage gaps and benchmark the overflow path (§4)

wistefan
and
claude
committed
82974a5
fix(dev): repair the dev stack, which validated but could not start (M-6 residual)

wistefan
and
claude
committed
484616a
move image to seamware
wistefan
committed
91b40cd
fixed ci
wistefan
committed
74a771f