fix(governance): close actor_mapping pseudonymization bypass#152

Open

jgbr1el93 wants to merge 27 commits into

fix/governance-actor-mapping-pseudonymization-bypass

Commits on May 15, 2026

test(governance): add failing tests for actor_mapping pseudonymization bypass fix [TDD-RED]
jgbr1el93
committed
fix(governance): make actor_mapping identity fields immutable post-creation [TDD-GREEN]
jgbr1el93
committed
test(governance): add fuzz tests for actor_mapping immutability invariants
jgbr1el93
committed
test(governance): add property tests for actor_mapping immutability invariants

jgbr1el93
and
claude
committed
test(governance): add integration tests for actor_mapping immutability and TOCTOU resistance
jgbr1el93
committed
test(governance): adjust integration tests to match new immutability contract
jgbr1el93
committed
test(governance): add chaos tests for actor_mapping immutability under DB failure injection
jgbr1el93
committed
fix(governance): record handler 409 as span business event
jgbr1el93
committed
feat(errors): register governance_actor_mapping_immutable in catalog
jgbr1el93
committed
test(governance): tighten sqlmock regex and decode 409 response body
jgbr1el93
committed
test(governance): fix irreversibility property with independent oracle
jgbr1el93
committed
test(chaos): serialize actor_mapping chaos tests and enforce immutable bucket floor
jgbr1el93
committed
test(e2e): align actor_mapping update journey with immutability contract
jgbr1el93
committed
docs(governance): update Upsert contract doc and table COMMENT for immutability
jgbr1el93
committed
docs(governance): fix Gate 8 review findings M-1, M-2, M-3
jgbr1el93
committed
chore(dev-cycle): commit cycle artifacts for fix/governance-actor-mapping-pseudonymization-bypass
jgbr1el93
committed
chore(dev-cycle): mark cycle as completed
jgbr1el93
committed
chore(governance): apply CodeRabbit local review findings
jgbr1el93
committed
docs(chaos): document serial-execution invariant in harness lock helpers
jgbr1el93
committed
docs(governance): include MTCH-0604 in 409 swagger description
jgbr1el93
committed
style(governance): fix gci comment indentation on ActorMapping docstring
jgbr1el93
committed
test(governance): assert timestamps unchanged on idempotent PUT
jgbr1el93
committed
test(governance): assert non-empty timestamps and GET-PUT timestamp parity
jgbr1el93
committed
docs(task): align task spec file list with actual implementation paths
jgbr1el93
committed
chore(dev-cycle): neutralize conventional-commits token in state file
jgbr1el93
committed
fix(governance): apply CodeRabbit follow-up findings on PR #152
jgbr1el93
committed
fix(governance): address actor mapping review feedback
gandalf-at-lerian
committed