mosaicstack/stack
21
0
Fork 1
Code Issues 338 Pull Requests 13 Actions Packages Projects Releases 15 Wiki Activity

feat(mosaic): add authenticated external lease broker #836

Merged
jason.woltje merged 12 commits from feat/828-lease-broker into main 2026-07-18 03:12:25 +00:00
Conversation 4 Commits 12 Files Changed 8
+1667
12 Commits
Author SHA1 Message Date
ms-lead-reviewer b072a7bd42 fix(#828): handle broker connections concurrently with per-conn deadlines + bounded concurrency
ci/woodpecker/pr/ci Pipeline was successful
Details
2026-07-17 21:57:05 -05:00
ms-lead-reviewer ff33cf3188 test(#828): regression for serial-accept DoS under queued silent peers 2026-07-17 21:56:35 -05:00
ms-lead-reviewer b118b65f11 docs(#828): record final lease broker gates
ci/woodpecker/pr/ci Pipeline was successful
Details
2026-07-17 21:18:05 -05:00
ms-lead-reviewer d05465e547 fix(#828): fail closed on uncertain broker commits 2026-07-17 21:12:36 -05:00
ms-lead-reviewer a94b122095 test(#828): fail closed on impossible durable state 2026-07-17 21:11:13 -05:00
ms-lead-reviewer a2a8b2a230 docs(#828): record bounded-state verification 
closes #828
 2026-07-17 21:07:01 -05:00
ms-lead-reviewer 0b953faf79 fix(#828): bound persisted broker token state 
Prune consumed and revoked tokens, cap pending token state, reject oversized serialization before replacement, and roll back in-memory mutations when persistence fails.\n\ncloses #828
 2026-07-17 21:04:21 -05:00
ms-lead-reviewer 4e9b4cdf97 test(#828): cover bounded broker token state 2026-07-17 20:56:56 -05:00
ms-lead-reviewer ec34aa9260 docs(#828): record lease broker verification 
Record exact test, coverage, review-remediation, and coordinator handoff evidence.\n\ncloses #828
 2026-07-17 20:51:54 -05:00
ms-lead-reviewer 57770e3443 fix(#828): drain oversized broker frames safely 
closes #828
 2026-07-17 20:50:00 -05:00
ms-lead-reviewer deb11df783 feat(#828): add authenticated lease broker 
Bind broker sessions to Linux SO_PEERCRED and /proc starttime ancestry, fence runtime generations, persist cryptographic single-use cycle tokens, and enforce protected Unix socket/state posture.\n\ncloses #828
 2026-07-17 20:45:00 -05:00
ms-lead-reviewer d61c5441fc test(#828): define lease broker security contract 
Add red-first acceptance coverage for kernel peer credentials, broker-minted sessions, ancestry and generation fencing, crypto tokens, protected socket/state posture, and fail-closed persistence boundaries.
 2026-07-17 20:44:37 -05:00