Verify MI receipts against authorized projections (#246) #252
No reviewers
Labels
No labels
accessibility
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
P1
P2
P3
question
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
Creatidy/scarcity-router!252
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "issue-246-authorized-receipt"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Refs #246
Retain a client-scoped binding from the authorized public route to the private MI utilization receipt, and provide authenticated versioned verification without returning private evidence. Verification rechecks the exact retained cut and internal MI binding. Historical correspondence is not current authorization or a cryptographic signature.
Validation: focused MI admission and server tests;
uv sync --only-dev;make check(3269 tests, 18 skipped);uv run basedpyright;make package-check;git diff --check. Synthetic restricted and unrestricted routes exercise response privacy. Full-suite loopback teardown logged connection resets without failing the suite.Base:
7985cbadd3Head:
af828fcOrdinary whole-PR independent review #1 reserved immediately before native dispatch. Scope: issue #246 and PR #252, base
7985cbadd3, HEADaf828fc620. Requested GPT-6.1 Sol High. Outcome pending; reservation is not approval.Review #1 dispatched via native Agent Manager local session
ses_e61360e84ffeGB3WOxcQqx9Igk; requestedGPT-6.1 Sol(openai) high. Frozen HEAD/base unchanged. Actual review verdict pending.Ordinary whole-PR review #1: APPROVE, empty findings, UX assessed with no material regression. Native reviewer session
ses_e61360e84ffeGB3WOxcQqx9Igk, requested GPT-6.1 Sol (openai), high; reviewed HEADaf828fc620and base/merge-base7985cbadd3. Review used read-only Forgejo source/diff getters; reviewer did not execute tests. Dispatch metadata is not a claim of independently verified backend identity.