mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-26 21:47:13 +00:00
Oliver Kieselbach
54c2c80904
The DevPrep shadow validator was never executed because the ValidateSecurityAsync extension constructed SecurityValidator without passing DeviceAssociationValidator, so _deviceAssociationValidator was always null and the gate at SecurityValidator.cs:370 silently skipped the lookup — even with ValidateDeviceAssociation=true on the tenant. Inject the validator via DI into all 9 agent-facing functions (RegisterSession, IngestEvents, GetAgentConfig, ReportAgentError, GetDiagnosticsUploadUrl + 4 Bootstrap variants) and thread it through the extension to SecurityValidator. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>