Repository navigation

CI-only: Committed reconciliation audit plus Secret Provider - #231

Closed

philipgreat wants to merge 58 commits into

mainfrom

ci/p1-committed-secret-audit-20261019

Closed

CI-only: Committed reconciliation audit plus Secret Provider#231
philipgreat wants to merge 58 commits into
mainfrom
ci/p1-committed-secret-audit-20261019

Commits on Oct 17, 2026
- feat(sqlite): add transactional committed-event outbox and inbox store
  Philip Z
  committed
  c12bb43
- Capture authoritative graph mutations in SQLite outbox
  Philip Z
  committed
  e2950af
- Freeze Java committed update facts from transaction preimages
  Philip Z
  committed
  5223153
- Apply committed events through model-checked Java SQLite target
  Philip Z
  committed
  1413c33
- Replay shared committed Order fixture in Java target test
  Philip Z
  committed
  409a8c0
- Add durable ordered Java committed-event publication
  Philip Z
  committed
  18850e2
- Prove DuckDB JDBC adapter rolls back replica state atomically
  Philip Z
  committed
  b03a35d
- Add transaction-owned DuckDB committed Inbox core
  Philip Z
  committed
  e09249f
- feat(duckdb): apply committed graph facts through model-checked target
  Philip Z
  committed
  842323e
- test(duckdb): replay shared committed Order fixture
  Philip Z
  committed
  b37911e
- fix(duckdb): verify canonical relation indexes on repeated schema
  Philip Z
  committed
  895d462
- Validate committed-event trace wire nodes
  Philip Z
  committed
  1a073c5
- Encode committed integral fields losslessly
  Philip Z
  committed
  9580529
- Validate committed calendar dates across runtimes
  Philip Z
  committed
  25e2368
- Reject inexact SQLite decimal replication
  Philip Z
  committed
  a034eb0
- Qualify committed scalar and null wire kinds
  Philip Z
  committed
  5f185b7
- Qualify committed nullable field transitions
  Philip Z
  committed
  6ec1f4f
- Qualify committed absolute instant codec on SQLite
  Philip Z
  committed
  26d4b75
- Reject unmodeled and out-of-range replicated Decimal values
  Philip Z
  committed
  d3f89cc
- Exercise committed SQLite-to-DuckDB delivery in runtime example
  Philip Z
  committed
  e1ac957
- Verify committed DuckDB target through generated Q API
  Philip Z
  committed
  35abd82
- Prove ordered lost-ack recovery in committed example
  Philip Z
  committed
  6c85892
- Add context-bound Java secret provider baseline
  Philip Z
  committed
  e97ed50
- Qualify Java secret expiry and concurrent contexts
  Philip Z
  committed
  9d9db82
- Prove concurrent Java secret resolution
  Philip Z
  committed
  0886b12
- Add controlled Vault KV v2 secret adapter
  Philip Z
  committed
  c77cd94
- Reject untrusted Vault HTTP profile before token resolution
  Philip Z
  committed
  047ddd0
- Qualify profile-scoped TLS trust for Vault example
  Philip Z
  committed
  d80b828
- Capture Vault TLS telemetry and assert canary redaction
  Philip Z
  committed
  c41a5e3
- test: verify Secret Provider against live Vault KV v2 TLS
  Philip Z
  committed
  554d244
- fix: bind file secrets to the original secure directory
  Philip Z
  committed
  53c8ebc
- Add Vault exported telemetry probe to secret example
  Philip Z
  committed
  ae6f92e
- Probe denied Vault read through exported telemetry
  Philip Z
  committed
  cd014e2
- Cover Vault missing malformed and expired telemetry probes
  Philip Z
  committed
  2b1b546
- Exercise stalled Vault response in telemetry probe
  Philip Z
  committed
  8c9e8fa
- Make Vault TLS example resilient to aborted handshakes
  Philip Z
  committed
  fa6a25f
- test: verify Vault bootstrap token rotation fails closed
  Philip Z
  committed
  8b385e1
- test: reject removed Vault TLS trust in one Context
  Philip Z
  committed
  08a1f92
- feat: support explicit private CA overlap for HTTP profiles
  Philip Z
  committed
  7671849
- Verify in-flight TLS trust replacement semantics
  Philip Z
  committed
  f797707
- Verify mixed-CA multi-context rollover
  Philip Z
  committed
  153e3dc
- test: bound stalled Vault TLS read across trust replacement
  Philip Z
  committed
  2bc4b6b
- test: qualify Vault TLS rollover across client processes
  Philip Z
  committed
  0a1efd6
- Exercise secret clock and shared custom SPI in native example
  Philip Z
  committed
  ca56321
- Probe independent mutation ledgers with shared secret provider
  Philip Z
  committed
  2d12225
- Test shared Vault provider request isolation across contexts
  Philip Z
  committed
  76b3f84
- Integrate isolated Secret Provider into current main gates
  Philip Z
  committed
  6b21282
- Prevent reflective JSON from exposing SecretValue bytes
  Philip Z
  committed
  01f7b79
Commits on Oct 18, 2026
- test: prove shared Vault provider request isolation
  Philip Z
  committed
  1cf2471
- Reject duplicate inbox after target checkpoint rewind
  Philip Z
  committed
  7cfe9ff
- Prevent HTTP credential serialization in Java
  Philip Z
  committed
  a32ddaa
- Keep nested JDBC save failures rollback-only
  Philip Z
  committed
  7f99d1e
- Mark JDBC transaction rollback-only after caught SQL failures
  Philip Z
  committed
  b81d975
- Rollback JDBC transaction after caught mapper failures
  Philip Z
  committed
  54d0f11
- fix: distinguish post-commit audit delivery failures
  Philip Z
  committed
  9389407
- fix: classify committed graph reconciliation failures
  Philip Z
  committed
  628991a
- fix: deliver committed audits after reconciliation failure
  Philip Z
  committed
  092e483
- test: combine committed audit and secret provider candidates
  Philip Z
  committed
  5fe3410

Commits

Commits on Oct 17, 2026

Commits on Oct 18, 2026