syncode/identity
2
0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix: enforce LocalAgent capability boundaries #14

Merged
day01 merged %!d() commits from %!s() into %!s() 2026-08-23 10:59:33 +00:00
Conversation 0 Commits - Files Changed -
day01 commented 2026-08-23 10:49:43 +00:00
Owner
Copy Link
Copy Source

Summary:

  • expand coarse grants into fine repository, code, PR, and issue capabilities
  • bind short-lived repository tokens to the git_http audience and repository resource
  • migrate existing coarse grants and token audiences explicitly

Verification:

  • cargo test --workspace
  • cargo clippy --workspace --all-targets -- -D warnings
  • scripts/check-architecture.sh
  • scripts/check-rust-loc.sh
Summary: - expand coarse grants into fine repository, code, PR, and issue capabilities - bind short-lived repository tokens to the git_http audience and repository resource - migrate existing coarse grants and token audiences explicitly Verification: - cargo test --workspace - cargo clippy --workspace --all-targets -- -D warnings - scripts/check-architecture.sh - scripts/check-rust-loc.sh
day01 added 1 commit 2026-08-23 10:49:45 +00:00
fix: enforce LocalAgent capability boundaries
day01 added 1 commit 2026-08-23 10:55:01 +00:00
fix: validate Git token audience scope
day01 merged commit 4f8f88dc7f into %!s() 2026-08-23 10:59:33 +00:00
day01 deleted branch feat/local-agent-stage6-hardening 2026-08-23 10:59:34 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
KG5321 (KG5321) day01 nauron
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: syncode/identity#14