Skip to content

fix(external-grants): suspend fleet-wide mixed-profile grant conflicts (hosted #5993, #5019 PR3-C) #6195

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
schickling wants to merge 57 commits into from
Closed

fix(external-grants): suspend fleet-wide mixed-profile grant conflicts (hosted #5993, #5019 PR3-C) #6195

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
57 commits
Select commit Hold shift + click to select a range
98e550c
fix(external-grants): own atomic profile admission and append
schickling-assistant Nov 8, 2026
5ec504c
perf(external-grants): index and prefilter principal admission history
schickling-assistant Nov 8, 2026
c1365c4
test(external-grants): prove prefilter admission equivalence
schickling-assistant Nov 8, 2026
0f1f0eb
fix(external-grants): suspend fleet-wide mixed-profile conflicts
schickling-assistant Nov 8, 2026
0c5875e
test(external-grants): measure q39 with verified foreign grants
schickling-assistant Nov 8, 2026
7a9009d
fix(delivery): retain request-history seek after admission index
schickling-assistant Nov 8, 2026
d374cbe
fix(external-grants): authenticate lifecycle overlays and opt in witn…
schickling-assistant Nov 8, 2026
1a20821
perf(external-grants): bound expiry and revocation conflict probes
schickling-assistant Nov 8, 2026
13da938
Seek active external grants through principal expiry ranges
schickling-assistant Nov 8, 2026
b259952
Accept covering expiry index for principal-only migration probe
schickling-assistant Nov 8, 2026
f429449
Merge final admission index safeguards into profile conflicts
schickling-assistant Nov 8, 2026
0ed611e
Merge current main into fleet profile conflict enforcement
schickling-assistant Nov 8, 2026
e62704f
Bound authoritative grant transitions and fence owner changes on the …
schickling-assistant Nov 8, 2026
d862c27
Register the transition index and query as large-value sites; use exp…
schickling-assistant Nov 8, 2026
9d47c73
Merge remote-tracking branch 'origin/main' into schickling-assistant/…
schickling-assistant Nov 8, 2026
7249e85
Expect profile-conflict suspension of the compat counterexample pair
schickling-assistant Nov 8, 2026
1dd5ec3
State the conflict-before-service refusal order in the compat test
schickling-assistant Nov 8, 2026
a80dc5e
Keep the store migration reference query identical to admission
schickling-assistant Nov 8, 2026
5a6ff90
Revoke service-grant fixtures the way the owner route does
schickling-assistant Nov 8, 2026
3a66dfb
Regenerate the TypeScript client for the owner-only witness descriptions
schickling-assistant Nov 8, 2026
1b7a91d
Replicate admission-bench overlays until every claim has verified pro…
schickling-assistant Nov 8, 2026
0828483
Record the pre-index admission plan as unplannable in the cost probe
schickling-assistant Nov 8, 2026
3abdd9a
Retain authenticated grant history and batch conflict admission reads
schickling-assistant Nov 8, 2026
dc75b63
Validate optional benchmark build identity only when measurement is r…
schickling-assistant Nov 9, 2026
2975777
Merge origin/main and regenerate the client schema descriptions
schickling-assistant Nov 9, 2026
5f0ada3
Project authenticated external-grant authority incrementally and perm…
schickling-assistant Nov 9, 2026
b679e88
Exercise authority projection rollback compatibility and bounded admi…
schickling-assistant Nov 9, 2026
c3bdfaa
Merge current main while retaining authority projection and pairing r…
schickling-assistant Nov 9, 2026
e638ad4
Preserve complete reserved fixture identity in SQLite inventory excerpt
schickling-assistant Nov 9, 2026
3c82349
Bound authority maintenance memory and avoid completed-history rescans
schickling-assistant Nov 9, 2026
80e8dec
Verify resumable authority migration across abrupt daemon death
schickling-assistant Nov 9, 2026
c8716c8
Keep malformed grant bases out of indexed bearer authority until repa…
schickling-assistant Nov 9, 2026
ffc6dc7
Regenerate retryable authority-backfill client error classification
schickling-assistant Nov 9, 2026
03b2f4e
Use structurally valid expired grant IDs in q39 comparisons
schickling-assistant Nov 9, 2026
7dd7b75
Adapt admission harness to current Unix socket readiness API
schickling-assistant Nov 9, 2026
36ecca3
Remove unused seccomp opcode without relaxing the clippy ratchet
schickling-assistant Nov 9, 2026
405eda4
Scope x32 comparison opcode to x86 and seccomp interpreter tests
schickling-assistant Nov 9, 2026
b456376
Correct raw-history repair oracle and late-signature admission fixture
schickling-assistant Nov 9, 2026
1273a35
Maintain authority in legacy test import and distinguish evidence fro…
schickling-assistant Nov 9, 2026
c774424
Record synthetic authority backfill timing and qualified 50GB extrapo…
schickling-assistant Nov 9, 2026
c12b224
fix: keep assistant authority maintenance reactive after backfill
schickling-assistant Nov 9, 2026
0cc74fa
fix: reconcile late assistant grant envelope signatures
schickling-assistant Nov 9, 2026
2631056
fix: persist local grant append provenance and reject ambiguous history
schickling-assistant Nov 9, 2026
32cfa40
fix: yield authority pages and fence maintenance lifecycle races
schickling-assistant Nov 9, 2026
160f60c
fix: keep grant provenance diagnostics local and document restore rei…
schickling-assistant Nov 9, 2026
05ab7c9
fix: bound grant authentication and skip duplicate signature refreshes
schickling-assistant Nov 9, 2026
dc771be
fix: isolate grant membership maintenance and subject readiness
schickling-assistant Nov 9, 2026
e102b69
fix: distinguish private subject fences from initial backfill readiness
schickling-assistant Nov 9, 2026
47658c3
fix: reuse authoritative fleet generation for grant maintenance
schickling-assistant Nov 9, 2026
0592e8f
fix: isolate pending grant subjects in writes and inspection
schickling-assistant Nov 9, 2026
594cfab
docs: scope fleet invalidation contract to projected windows
schickling-assistant Nov 9, 2026
198dc27
test: materialize unsigned keyed history before projection checks
schickling-assistant Nov 9, 2026
e127da3
fix: match assistant authority error codes directly
schickling-assistant Nov 9, 2026
92d5338
fix: name assistant grant membership window bounds
schickling-assistant Nov 9, 2026
2c905f2
test: align grant fixtures with authenticated authority fencing
schickling-assistant Nov 9, 2026
cb1be0a
test: prepare sealed membership before authority benchmark backfill
schickling-assistant Nov 10, 2026
635e3ba
test: persist benchmark membership snapshot before seeding
schickling-assistant Nov 10, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion clients/swift/FractalClient/Sources/FractalClient/Client.swift
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

22 changes: 21 additions & 1 deletion clients/swift/FractalClient/Sources/FractalClient/Models.swift
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions clients/typescript/fractal-client/Client.generated.ts
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

23 changes: 23 additions & 0 deletions clients/typescript/fractal-client/Models.generated.ts
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 2 additions & 0 deletions clients/typescript/fractal-client/ReadSchema.generated.ts
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading