weichen 06ef17a70a Harden delegated role authority boundaries ...

Why: Independent review found delegated account actions, stale resource policy, and role migration cutover gaps in the initial U4 implementation.

Evidence: Backend full SQLite suite passed; isolated PostgreSQL role and migration suite passed; independent final review found no remaining findings.

Impact: Enforces transactional system grants, current role snapshots, staged role import with v36 migration, and fail-closed activation.

Refs: feature/iam-u4-role-authority

2026-10-15 02:27:50 +00:00

..

testdata

Wire plugin slash aliases and the intent declaration surface (G2-2)

2026-10-10 00:15:21 +00:00

account_contract_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_effect_guard.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_search.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

account_sse_test.go

Require password lineage and make recovery retries metadata-only

2026-10-14 04:58:31 +00:00

account_write_fence_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

accounts.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

action_matrix_test.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

adminzone_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

admission_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

api_key_fixture_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

artifact_download_test.go

Add download semantics and extension MIME fallback to artifact content

2026-09-30 15:23:02 +00:00

audit_scope_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

auth_e2e_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

auth.go

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

borrow_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

borrow.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

command_pairs_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

compiled_list_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

disk_full_test.go

Harden cross-instance HITL/cancel command paths and add disk-full rejection tests (U7)

2026-10-12 02:28:48 +00:00

e2e_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

ext9_upload_switch_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

guard_test.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

guard.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

intent_button_test.go

Whitelist B-class surface actions for help and intent

2026-10-12 03:18:57 +00:00

login_key_test.go

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

login_recovery_test.go

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

platform_api.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

project_events_test.go

Allow private project replay test to reach shared event

2026-10-14 14:23:39 +00:00

project_events.go

Protect private project event replay and live delivery

2026-10-13 11:12:47 +00:00

project_lifecycle_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

project_lifecycle.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

project_resource_filter_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

ratelimit_e2e_test.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

ratelimit.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

recovery_contract_test.go

Require password lineage and make recovery retries metadata-only

2026-10-14 04:58:31 +00:00

recovery_multi_instance_test.go

Fence final run settlement against account disable

2026-10-14 04:48:53 +00:00

recovery.go

Require password lineage and make recovery retries metadata-only

2026-10-14 04:58:31 +00:00

resource_authz_consumption_test.go

Harden delegated role authority boundaries

2026-10-15 02:27:50 +00:00

resource_authz_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

rewind_http_test.go

Make the rewind happy test tolerant of the settle-release window

2026-10-07 18:04:08 +00:00

rewind.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

role_authorization_test.go

Harden delegated role authority boundaries

2026-10-15 02:27:50 +00:00

roles_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

roles.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

run_process_events_test.go

Verify disabled process replay across independent stores

2026-10-14 14:52:05 +00:00

server.go

Harden delegated role authority boundaries

2026-10-15 02:27:50 +00:00

shared_projects_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

shared_retrieval_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

sse_close_test.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

sse_retry_test.go

Send an SSE retry interval and replay after overflow

2026-10-03 16:35:34 +00:00

surface_api_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

urlpreview_test.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

urlpreview.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

workflow_route_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00