Repository navigation

P1: isolate Context-owned Secret Provider on current main - #218

Open

philipgreat wants to merge 29 commits into

mainfrom

feat/secret-provider-main

Open

P1: isolate Context-owned Secret Provider on current main#218
philipgreat wants to merge 29 commits into
mainfrom
feat/secret-provider-main

Commits on Oct 17, 2026
- Add context-bound Java secret provider baseline
  Philip Z
  committed
  e97ed50
- Qualify Java secret expiry and concurrent contexts
  Philip Z
  committed
  9d9db82
- Prove concurrent Java secret resolution
  Philip Z
  committed
  0886b12
- Add controlled Vault KV v2 secret adapter
  Philip Z
  committed
  c77cd94
- Reject untrusted Vault HTTP profile before token resolution
  Philip Z
  committed
  047ddd0
- Qualify profile-scoped TLS trust for Vault example
  Philip Z
  committed
  d80b828
- Capture Vault TLS telemetry and assert canary redaction
  Philip Z
  committed
  c41a5e3
- test: verify Secret Provider against live Vault KV v2 TLS
  Philip Z
  committed
  554d244
- fix: bind file secrets to the original secure directory
  Philip Z
  committed
  53c8ebc
- Add Vault exported telemetry probe to secret example
  Philip Z
  committed
  ae6f92e
- Probe denied Vault read through exported telemetry
  Philip Z
  committed
  cd014e2
- Cover Vault missing malformed and expired telemetry probes
  Philip Z
  committed
  2b1b546
- Exercise stalled Vault response in telemetry probe
  Philip Z
  committed
  8c9e8fa
- Make Vault TLS example resilient to aborted handshakes
  Philip Z
  committed
  fa6a25f
- test: verify Vault bootstrap token rotation fails closed
  Philip Z
  committed
  8b385e1
- test: reject removed Vault TLS trust in one Context
  Philip Z
  committed
  08a1f92
- feat: support explicit private CA overlap for HTTP profiles
  Philip Z
  committed
  7671849
- Verify in-flight TLS trust replacement semantics
  Philip Z
  committed
  f797707
- Verify mixed-CA multi-context rollover
  Philip Z
  committed
  153e3dc
- test: bound stalled Vault TLS read across trust replacement
  Philip Z
  committed
  2bc4b6b
- test: qualify Vault TLS rollover across client processes
  Philip Z
  committed
  0a1efd6
- Exercise secret clock and shared custom SPI in native example
  Philip Z
  committed
  ca56321
- Probe independent mutation ledgers with shared secret provider
  Philip Z
  committed
  2d12225
- Test shared Vault provider request isolation across contexts
  Philip Z
  committed
  76b3f84
- Integrate isolated Secret Provider into current main gates
  Philip Z
  committed
  6b21282
- Prevent reflective JSON from exposing SecretValue bytes
  Philip Z
  committed
  01f7b79
Commits on Oct 18, 2026
- test: prove shared Vault provider request isolation
  Philip Z
  committed
  1cf2471
- Prevent HTTP credential serialization in Java
  Philip Z
  committed
  a32ddaa
Commits on Oct 22, 2026
- test: preserve pending graph state across secret rotation (#267) [skip ci]
  Philip Z
  committed
  a847dac

Commits

Commits on Oct 17, 2026

Commits on Oct 18, 2026

Commits on Oct 22, 2026