 ms-lead-reviewer
|
4e9b4cdf97
|
test(#828): cover bounded broker token state
|
2026-07-17 20:56:56 -05:00 |
|
|
ms-lead-reviewer
|
ec34aa9260
|
docs(#828): record lease broker verification
Record exact test, coverage, review-remediation, and coordinator handoff evidence.\n\ncloses #828
|
2026-07-17 20:51:54 -05:00 |
|
|
ms-lead-reviewer
|
57770e3443
|
fix(#828): drain oversized broker frames safely
closes #828
|
2026-07-17 20:50:00 -05:00 |
|
|
ms-lead-reviewer
|
deb11df783
|
feat(#828): add authenticated lease broker
Bind broker sessions to Linux SO_PEERCRED and /proc starttime ancestry, fence runtime generations, persist cryptographic single-use cycle tokens, and enforce protected Unix socket/state posture.\n\ncloses #828
|
2026-07-17 20:45:00 -05:00 |
|
|
ms-lead-reviewer
|
d61c5441fc
|
test(#828): define lease broker security contract
Add red-first acceptance coverage for kernel peer credentials, broker-minted sessions, ancestry and generation fencing, crypto tokens, protected socket/state posture, and fail-closed persistence boundaries.
|
2026-07-17 20:44:37 -05:00 |
|