8 Commits

Author	SHA1	Message	Date
Richard Courtman	1968dc4171	Close remaining CodeQL allocation and cookie gaps	2026-07-09 20:10:08 +01:00
rcourtman	042e7ef966	Harden remaining CodeQL security boundaries	2026-07-09 19:46:40 +01:00
rcourtman	9cddb49dd5	Fail closed on hosted handoff identity	2026-05-04 09:47:54 +01:00
rcourtman	3e497ecb70	Harden hosted tenant identity keys ... Use stable control-plane user IDs as hosted tenant organization principals while preserving email as contact metadata and legacy fallback. Cloud handoff sessions now bind to the signed subject instead of email, seeded tenant orgs store owner/member email separately from durable user IDs, and the subsystem contracts pin that boundary.	2026-05-03 23:28:26 +01:00
rcourtman	02e9107ac4	Harden cloud handoff membership authorization	2026-04-21 23:18:35 +01:00
Richard Courtman	57a3f19a84	fix(hosted): preserve direct handoff membership continuity	2026-03-26 23:40:02 +00:00
rcourtman	cf2915ca54	fix(release): harden handoff auth stores and installer rehearsal harness	2026-03-26 13:32:39 +00:00
rcourtman	778a2577b6	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00