Repository navigation

feat(approval): close host gate contract gaps - #16

Merged

senamakel merged 39 commits into

epic/8369-security-migrationfrom

sec-649-tinysecurity-approval

Oct 25, 2026

Merged

feat(approval): close host gate contract gaps#16
senamakel merged 39 commits into
epic/8369-security-migrationfrom
sec-649-tinysecurity-approval

Commits on Oct 25, 2026
- test(tinysecurity-auto): cover unknown origin and tighten operator expectation
  
  senamakel
  and
  medullabot
  committed
  7173955
- fix(auto): treat unknown origin as grant only
  
  senamakel
  and
  medullabot
  committed
  c3742b5
- test(approval): cover require_approval overriding whole-tool allowlist
  
  senamakel
  and
  medullabot
  committed
  465748c
- fix(approval): treat unknown origin as unlabelled and skip approval rules
  
  senamakel
  and
  medullabot
  committed
  46d837d
- feat(approval): add cross-scope recent decisions listing
  
  senamakel
  and
  medullabot
  committed
  fdc53f8
- feat(approval): expose caller session id on approval rows
  
  senamakel
  and
  medullabot
  committed
  86358e7
- fix(approval): populate session id on approval rows
  
  senamakel
  and
  medullabot
  committed
  4097241
- feat(approval): add session purge and audit error recording
  
  senamakel
  and
  medullabot
  committed
  0bc53cb
- fix(approval): handle missing session id in binding validation
  
  senamakel
  and
  medullabot
  committed
  2077afe
- test: add session id and audit error fields to test fixtures
  
  senamakel
  and
  medullabot
  committed
  f397ed7
- fix(approval): honour durable grants when scope requires approval
  
  senamakel
  and
  medullabot
  committed
  2225ada
- feat(approval): add session purge and audit error recording
  
  senamakel
  and
  medullabot
  committed
  3bc4605
- chore(bus): drop purge session request from redacted debug
  
  senamakel
  and
  medullabot
  committed
  2a44065
- test(approval): align scope race tests with pending lifecycle
  
  senamakel
  and
  medullabot
  committed
  18fa758
- test(approval): import GrantToolRequest2 in engine scope tests
  
  senamakel
  and
  medullabot
  committed
  b9dcf98
- test(approval): cover scope replacement with a distinct policy ref
  
  senamakel
  and
  medullabot
  committed
  60f58cb
- test(bus): cover contract 1.30 methods and compatibility
  
  senamakel
  and
  medullabot
  committed
  b06c98e
- feat(bus): register new approval and audit methods
  
  senamakel
  and
  medullabot
  committed
  d84608e
- test(bus): bump expected contract version to 1.30
  
  senamakel
  and
  medullabot
  committed
  dd912b1
- test(module): cover required approval precedence over tool grants
  
  senamakel
  and
  medullabot
  committed
  158cf80
- test(tinysecurity-bus): return result from session purge contract test
  
  senamakel
  and
  medullabot
  committed
  80227cf
- test(approval): use checked conversion for removed count
  
  senamakel
  and
  medullabot
  committed
  e72abe7
- fix(tinysecurity-module): disable approval requirement in scope example
  
  senamakel
  and
  medullabot
  committed
  a49c048
- chore(examples): add origin field to approval scope contract example
  
  senamakel
  and
  medullabot
  committed
  f4d14c9
- chore(examples): set saas origin in approval scope contract
  
  senamakel
  and
  medullabot
  committed
  d997830
- chore(examples): reorder imports in approval scope contract
  
  senamakel
  and
  medullabot
  committed
  47827a3
- test(approval): cover purge session debug redaction
  
  senamakel
  and
  medullabot
  committed
  084734a
- test(approval): cover session purge and client validation paths
  
  senamakel
  and
  medullabot
  committed
  68c7aee
- test(approval): clone scope and handle in callback assertions
  
  senamakel
  and
  medullabot
  committed
  cc5facf
- test(approval): serve object path in runtime subject test
  
  senamakel
  and
  medullabot
  committed
  316dfa4
- test(approval): split session purge scope checks into a dedicated test
  
  senamakel
  and
  medullabot
  committed
  a135181
- test(approval): cover empty init scope list in its own case
  
  senamakel
  and
  medullabot
  committed
  ac6c0d0
- test(approval): cover audit error and session purge edge cases
  
  senamakel
  and
  medullabot
  committed
  aa2c54c
- test(bus): cover session purge debug redaction
  
  senamakel
  and
  medullabot
  committed
  3c55e71
- test(module): cover recent decisions, session purge and audit errors
  
  senamakel
  and
  medullabot
  committed
  ac3e2a0
- test(approval): cover default purge_session port failing closed
  
  senamakel
  and
  medullabot
  committed
  f9cd99e
- test(adapter-approval): drive approval through consume and execution before audit error
  
  senamakel
  and
  medullabot
  committed
  24360da
- style: apply rustfmt formatting to approval tests and example
  
  senamakel
  and
  medullabot
  committed
  f60f833
- chore(examples): avoid consuming callback name list
  
  senamakel
  and
  medullabot
  committed
  b391a2d

Commits

Commits on Oct 25, 2026