All pull requests

Pull requests

• feat(server): fleet-join reports why directly-asked admitters refused

  needs-team-review
  #4494·chefsale opened Oct 6, 2026Member·2 of 3 tasks·

  ·

• fix(auth): key password users by a random id and keep password material out of tokens

  medium-priorityneeds-team-review
  #4490·rtb-12 opened Oct 5, 2026Member·

  ·

• fix(governance): carry an account's device revocation into every namespace it takes part in

  medium-priorityneeds-team-review
  #4489·rtb-12 opened Oct 5, 2026Member·

  ·
  1

• fix(storage): keep entries a deleter does not own when a public container is deleted

  high-priorityneeds-team-review
  #4488·rtb-12 opened Oct 5, 2026Member·

  ·

• fix(governance): refuse a join from a device that is out at the op's cut

  high-priorityneeds-team-review
  #4487·rtb-12 opened Oct 5, 2026Member·

  ·

• fix(sync): record the invited role when a namespace join is answered

  buge2e-testmedium-priorityrustsecurity
  #4481·rtb-12 opened Oct 5, 2026Member·2/2·

  ·

• fix(governance): rotate a subgroup's key when it becomes Restricted

  bugmedium-priorityrustsecurity
  #4480·rtb-12 opened Oct 5, 2026Member·2/2·

  ·
  1

• fix(server): ask no peer for a blob on a passive request from another site

  bugmedium-priorityneeds-team-reviewrustsecurity
  #4477·rtb-12 opened Oct 5, 2026Member·

  ·

• fix(server): refuse an sse request no script opened before creating a session

  bugmedium-priorityneeds-team-reviewrustsecurity
  #4476·rtb-12 opened Oct 5, 2026Member·

  ·
  1

• feat(merod): default merod init to embedded auth

  blockedclie2e-testenhancementmedium-priorityneeds-team-reviewrustsecurity
  #4472·rtb-12 opened Oct 4, 2026Member·

  ·
  1

• fix(server): judge a websocket upgrade by the origin guard

  bugmedium-priorityneeds-team-reviewrustsecurity
  #4471·rtb-12 opened Oct 4, 2026Member·

  ·

• fix(auth): refuse the mock token endpoint to browser pages

  bugmedium-priorityrustsecurity
  #4469·rtb-12 opened Oct 4, 2026Member·2/2·

  ·

• fix(server): give a sealed request the outer hop's origin

  bugmedium-priorityneeds-team-reviewrustsecurity
  #4468·rtb-12 opened Oct 4, 2026Member·1/2·

  ·

• fix(projection): fold a join so it never replaces a standing role

  bughigh-priorityneeds-team-reviewruststate-management
  #4465·rtb-12 opened Oct 4, 2026Member·1/2·

  ·
  2

• test(governance): add an authorization matrix over actor states and gated operations

  needs-team-reviewsecurity
  #4362·rtb-12 opened Oct 1, 2026Member·

  ·
  4

• fix(account): cap the lifetime of request and session links

  medium-priorityneeds-team-review
  #4348·rtb-12 opened Oct 1, 2026Member·

  ·

• fix(dag): bound the parents a delta may name and the bytes held pending

  high-priorityneeds-team-review
  #4323·rtb-12 opened Oct 1, 2026Member·

  ·
  1

• refactor(storage): delete the rotation log and describe writer sets as the governance fold

  #4278·rtb-12 opened Oct 1, 2026Member·4/4·

  ·
  2

• feat(governance): read and rotate a shared cell's writers through the governance fold

  #4277·rtb-12 opened Oct 1, 2026Member·3/4·

  ·
  3

• fix(tee): bind admission quotes to the admitted credential and a fresh challenge

  high-priorityneeds-team-reviewsecurity
  #4265·rtb-12 opened Sep 30, 2026Member·

  ·
  7

• fix(node): check every snapshot entity, and install a snapshot only once its tree folds to the claimed root

  high-priorityneeds-team-review
  #4229·rtb-12 opened Sep 29, 2026Member·

  ·
  12

• fix(context): give delegated runs an empty private store and fail their private writes

  high-priorityneeds-team-review
  #4223·rtb-12 opened Sep 29, 2026Member·

  ·
  7

• fix(storage): apply remote root and register writes through the remote write rules

  needs-team-reviewP0
  #4204·rtb-12 opened Sep 29, 2026Member·

  ·
  4

• test(e2e): prove a device-key session can subscribe over WebSocket and SSE

  needs-team-reviewStale
  #4168·xilosada opened Sep 28, 2026Member·

  ·
  1

• ci(storage-cost): gate storage row costs against a committed snapshot

  improvementneeds-team-review
  #3975·xilosada opened Sep 17, 2026Member·

  ·