harden(data): changing an API key through the data door requires a signed-in session by objectstack-fleet[bot] · Pull Request #27692 · objectstack-ai/objectstack

harden(data): changing an API key through the data door requires a signed-in session

claude

committed

dc43835

chore(changeset): declare the data-door API-key management narrowing

claude

committed

b5da53d

harden(rest): hand the route context to enforceApiAccess; ask the rule per op on the cross-object batch

claude

committed

fbacecb

test(runtime): set aside and pin REST's admitted-credential key in the one-context conformance

claude

committed

5215b07

test(rest): open the batch fake's update with the engine's dispatch assertion

claude

committed

abe793d

Merge origin/main into claude/harden-api-key-data-door

claude

committed

a9befcf

harden(mcp): ask the API-key management rule on the stdio transport's write arms

claude

committed

c977140

test(mcp): assert the stdio write refusals against the engine read the bridge uses

claude

committed

9bb853f

harden(mcp): the stdio write-arm rule reads no elevation flag

claude

committed

853277e

Navigation Menu

Repository navigation

harden(data): changing an API key through the data door requires a signed-in session - #27692

harden(data): changing an API key through the data door requires a signed-in session#27692
objectstack-fleet[bot] merged 9 commits into
mainfrom
claude/harden-api-key-data-door

Commits on Oct 29, 2026

harden(data): changing an API key through the data door requires a signed-in session

chore(changeset): declare the data-door API-key management narrowing

harden(rest): hand the route context to enforceApiAccess; ask the rule per op on the cross-object batch

test(runtime): set aside and pin REST's admitted-credential key in the one-context conformance

test(rest): open the batch fake's update with the engine's dispatch assertion

Merge origin/main into claude/harden-api-key-data-door

harden(mcp): ask the API-key management rule on the stdio transport's write arms

test(mcp): assert the stdio write refusals against the engine read the bridge uses

harden(mcp): the stdio write-arm rule reads no elevation flag