ms-lead-reviewer
b072a7bd42
fix( #828 ): handle broker connections concurrently with per-conn deadlines + bounded concurrency
ci/woodpecker/pr/ci Pipeline was successful
2026-07-17 21:57:05 -05:00
ms-lead-reviewer
ff33cf3188
test( #828 ): regression for serial-accept DoS under queued silent peers
2026-07-17 21:56:35 -05:00
ms-lead-reviewer
b118b65f11
docs( #828 ): record final lease broker gates
ci/woodpecker/pr/ci Pipeline was successful
2026-07-17 21:18:05 -05:00
ms-lead-reviewer
d05465e547
fix( #828 ): fail closed on uncertain broker commits
2026-07-17 21:12:36 -05:00
ms-lead-reviewer
a94b122095
test( #828 ): fail closed on impossible durable state
2026-07-17 21:11:13 -05:00
ms-lead-reviewer
a2a8b2a230
docs( #828 ): record bounded-state verification
...
closes #828
2026-07-17 21:07:01 -05:00
ms-lead-reviewer
0b953faf79
fix( #828 ): bound persisted broker token state
...
Prune consumed and revoked tokens, cap pending token state, reject oversized serialization before replacement, and roll back in-memory mutations when persistence fails.\n\ncloses #828
2026-07-17 21:04:21 -05:00
ms-lead-reviewer
4e9b4cdf97
test( #828 ): cover bounded broker token state
2026-07-17 20:56:56 -05:00
ms-lead-reviewer
ec34aa9260
docs( #828 ): record lease broker verification
...
Record exact test, coverage, review-remediation, and coordinator handoff evidence.\n\ncloses #828
2026-07-17 20:51:54 -05:00
ms-lead-reviewer
57770e3443
fix( #828 ): drain oversized broker frames safely
...
closes #828
2026-07-17 20:50:00 -05:00
ms-lead-reviewer
deb11df783
feat( #828 ): add authenticated lease broker
...
Bind broker sessions to Linux SO_PEERCRED and /proc starttime ancestry, fence runtime generations, persist cryptographic single-use cycle tokens, and enforce protected Unix socket/state posture.\n\ncloses #828
2026-07-17 20:45:00 -05:00
ms-lead-reviewer
d61c5441fc
test( #828 ): define lease broker security contract
...
Add red-first acceptance coverage for kernel peer credentials, broker-minted sessions, ancestry and generation fencing, crypto tokens, protected socket/state posture, and fail-closed persistence boundaries.
2026-07-17 20:44:37 -05:00
