weichen 0e8cd040cc Bind audit publishers and randomize operation IDs ...

Why: Clock-derived IDs could collide and string-scoped hosts could impersonate a registered audit publisher.

Evidence: Fixed-clock concurrent, ambiguous private offset, forged scoped-host, and registered publisher RED-to-GREEN tests; go test ./... -count=1 and targeted race test passed locally as SELF.

Impact: Generate 192-bit host IDs, reject ambiguous explicit offsets, and issue a publication-only capability at verifier registration.

Refs: Stage 5 W9; approved Stage 6 audit-link design adjustment r1; review of a8fa2fe

2026-10-14 04:29:38 +00:00

..

account_lister_test.go

Add account name passthrough and EXT-19 account search

2026-10-13 06:04:26 +00:00

app.go

Add verified project audit links and button actors

2026-10-14 04:05:10 +00:00

compiled_authz_test.go

Let in-proc plugins register the EXT-8 resource authorizer (fix rdm.* unknown-command)

2026-10-10 02:06:12 +00:00

compiled_list_test.go

Declare admin-zone sections from compiled plugins (surface 2.9.0)

2026-10-12 02:28:51 +00:00

compiled.go

Bind trusted operation IDs before domain handlers

2026-10-14 04:11:09 +00:00

ext9_publish_test.go

Add the EXT-9 publish/revoke surface and red acceptance tests

2026-10-08 15:53:39 +00:00

ext13_shared_search_test.go

Share retrieval inside runs and open project listing/conversations to members (EXT-13/15)

2026-10-09 15:44:48 +00:00

ext18_admin_test.go

Add AdminProvider capability and HostProjectID context (EXT-18)

2026-10-11 16:23:15 +00:00

hostcaps.go

Add scoped project command audit read slice

2026-10-14 03:42:28 +00:00

inproc_host_test.go

Expose builtin document parsing through the host handle

2026-10-06 14:59:38 +00:00

intent_flags_test.go

Wire GenAI telemetry: settings surface, service name, and agent names (N3 WP4)

2026-10-07 15:41:01 +00:00

knowledge_authorization_test.go

Recheck resumed project work and isolate publication replacement

2026-10-13 09:04:06 +00:00

llmproxy.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

mcp_cache_test.go

Run tool scripts through the shared host and keep orchestration off

2026-10-03 18:04:25 +00:00

project_audit_link_test.go

Bind audit publishers and randomize operation IDs

2026-10-14 04:29:38 +00:00

project_audit_test.go

Add verified project audit links and button actors

2026-10-14 04:05:10 +00:00

project_audit.go

Bind audit publishers and randomize operation IDs

2026-10-14 04:29:38 +00:00

project_lifecycle_test.go

Protect shared project metadata credentials and managed settings

2026-10-13 09:46:20 +00:00

project_lifecycle.go

Protect shared project metadata credentials and managed settings

2026-10-13 09:46:20 +00:00

resource_authz_v2_test.go

Add EXT-8b resource-level authorization contract

2026-10-12 11:44:00 +00:00

scoped_host_test.go

gofmt the ext-11 files

2026-10-08 17:02:16 +00:00

surface_audit_actor_test.go

Bind audit publishers and randomize operation IDs

2026-10-14 04:29:38 +00:00

surface_dispatch.go

Add verified project audit links and button actors

2026-10-14 04:05:10 +00:00

tier_test.go

Add the team PG tier, atomic migrations and the connection budget (U2)

2026-10-11 03:10:55 +00:00