Verify MI receipts against authorized projections (#246) #252

Merged
kilo merged 1 commit from issue-246-authorized-receipt into develop 2026-11-03 00:39:13 +00:00
Member

Refs #246

Retain a client-scoped binding from the authorized public route to the private MI utilization receipt, and provide authenticated versioned verification without returning private evidence. Verification rechecks the exact retained cut and internal MI binding. Historical correspondence is not current authorization or a cryptographic signature.

Validation: focused MI admission and server tests; uv sync --only-dev; make check (3269 tests, 18 skipped); uv run basedpyright; make package-check; git diff --check. Synthetic restricted and unrestricted routes exercise response privacy. Full-suite loopback teardown logged connection resets without failing the suite.

Base: 7985cbadd3
Head: af828fc

Refs #246 Retain a client-scoped binding from the authorized public route to the private MI utilization receipt, and provide authenticated versioned verification without returning private evidence. Verification rechecks the exact retained cut and internal MI binding. Historical correspondence is not current authorization or a cryptographic signature. Validation: focused MI admission and server tests; `uv sync --only-dev`; `make check` (3269 tests, 18 skipped); `uv run basedpyright`; `make package-check`; `git diff --check`. Synthetic restricted and unrestricted routes exercise response privacy. Full-suite loopback teardown logged connection resets without failing the suite. Base: 7985cbadd31e6b594cb3a7b5fc27a06f6e03f33e Head: af828fc
Bind MI receipts to authorized projections (#246)
All checks were successful
ci / check (pull_request) Successful in 12m51s
af828fc620
Author
Member

Ordinary whole-PR independent review #1 reserved immediately before native dispatch. Scope: issue #246 and PR #252, base 7985cbadd3, HEAD af828fc620. Requested GPT-6.1 Sol High. Outcome pending; reservation is not approval.

Ordinary whole-PR independent review #1 reserved immediately before native dispatch. Scope: issue #246 and PR #252, base 7985cbadd31e6b594cb3a7b5fc27a06f6e03f33e, HEAD af828fc620d71ead4fce96a7f75f0a09ac973567. Requested GPT-6.1 Sol High. Outcome pending; reservation is not approval.
Author
Member

Review #1 dispatched via native Agent Manager local session ses_e61360e84ffeGB3WOxcQqx9Igk; requested GPT-6.1 Sol (openai) high. Frozen HEAD/base unchanged. Actual review verdict pending.

Review #1 dispatched via native Agent Manager local session `ses_e61360e84ffeGB3WOxcQqx9Igk`; requested `GPT-6.1 Sol` (openai) high. Frozen HEAD/base unchanged. Actual review verdict pending.
Author
Member

Ordinary whole-PR review #1: APPROVE, empty findings, UX assessed with no material regression. Native reviewer session ses_e61360e84ffeGB3WOxcQqx9Igk, requested GPT-6.1 Sol (openai), high; reviewed HEAD af828fc620 and base/merge-base 7985cbadd3. Review used read-only Forgejo source/diff getters; reviewer did not execute tests. Dispatch metadata is not a claim of independently verified backend identity.

Ordinary whole-PR review #1: APPROVE, empty findings, UX assessed with no material regression. Native reviewer session `ses_e61360e84ffeGB3WOxcQqx9Igk`, requested GPT-6.1 Sol (openai), high; reviewed HEAD af828fc620d71ead4fce96a7f75f0a09ac973567 and base/merge-base 7985cbadd31e6b594cb3a7b5fc27a06f6e03f33e. Review used read-only Forgejo source/diff getters; reviewer did not execute tests. Dispatch metadata is not a claim of independently verified backend identity.
kilo merged commit c16cc1db29 into develop 2026-11-03 00:39:13 +00:00
Sign in to join this conversation.
No description provided.