Oliver Kieselbach 4a7eb2749d fix(backend): bootstrap revoke enforces code ownership — DELETE /api/bootstrap/sessions/{code} only scoped the caller's ?tenantId while the repository resolved the owning tenant from CodeLookup and revoked any tenant's code; RevokeBootstrapSessionAsync now takes the caller tenant and refuses a mismatch as not-found (no owner leak, foreign partition never read), with regression tests ...

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-30 16:59:32 +02:00

..

AutopilotMonitor.DecisionCore

fix(agent): complete enrollments with zero user-targeted apps instead of failing them

2026-08-25 12:27:42 +02:00

AutopilotMonitor.Shared

fix(backend): bootstrap revoke enforces code ownership — DELETE /api/bootstrap/sessions/{code} only scoped the caller's ?tenantId while the repository resolved the owning tenant from CodeLookup and revoked any tenant's code; RevokeBootstrapSessionAsync now takes the caller tenant and refuses a mismatch as not-found (no owner leak, foreign partition never read), with regression tests

2026-08-30 16:59:32 +02:00

LICENSE

update license

2026-03-26 07:02:33 +01:00