Files
pulse/internal/api/configapi
pulse-triage[bot] 3b6483fce6 Keep tenant authentication bound to the current runtime owner
Use the configuration handler's locked monitor-manager reference for auth-context extraction and route revalidation, rather than capturing the manager that an instance reload replaces. Add synthetic old/new-owner, between-check replacement and removed-reference controls without exercising native reload or altering membership/scope rules.

Contract-Neutral: Maintains the existing current-owner credential validation and tenant-isolation invariants across monitor replacement; no public fields, scope grants, membership or reload policy change.
Change-source: pulse-maintainer
2026-10-25 01:43:58 +00:00
..