Files
pulse/internal
rcourtman 3fcd26b5c3 Stop the Autopilot gate from leaking acknowledgement_id downstream
GatePatrolAutonomyUpdate validates and consumes the activation
acknowledgement, then re-marshals the settings for the downstream
handler - but the marshaled body still carried acknowledgement_id.
The Pro autonomy handler decodes the body with DisallowUnknownFields
and has no such field, so every Autopilot (full mode) activation on a
Pro build failed with 400 Invalid request body. Lower autonomy levels
forward the original body untouched, which is why only full mode broke.

Clear the consumed acknowledgement before normalizing and hand it to
the downstream handler via request context only. The new regression
test strict-decodes the forwarded body with the enterprise handler's
exact field set.

Contract-Neutral: Autopilot activation gate normalization fix; endpoint contract unchanged
2026-07-19 19:51:32 +01:00
..
2026-07-19 15:52:42 +01:00
2026-07-19 15:52:42 +01:00
2026-07-11 18:25:17 +01:00