 ms-lead-reviewer
|
deb11df783
|
feat(#828): add authenticated lease broker
Bind broker sessions to Linux SO_PEERCRED and /proc starttime ancestry, fence runtime generations, persist cryptographic single-use cycle tokens, and enforce protected Unix socket/state posture.\n\ncloses #828
|
2026-07-17 20:45:00 -05:00 |
|
|
ms-lead-reviewer
|
d61c5441fc
|
test(#828): define lease broker security contract
Add red-first acceptance coverage for kernel peer credentials, broker-minted sessions, ancestry and generation fencing, crypto tokens, protected socket/state posture, and fail-closed persistence boundaries.
|
2026-07-17 20:44:37 -05:00 |
|