feat(auth): define provider-neutral authorization contracts - #144

Draft

djwhitt wants to merge 12 commits into

mainfrom

oidc-auth-contracts

Commits on Aug 14, 2026

feat(auth): define provider-neutral authorization contracts
djwhitt
committed
725d0a9

Commits on Aug 15, 2026

fix(auth): tighten principal and context trust contracts
djwhitt
committed
1ed0b82
fix(auth): require expiry for OIDC contexts
djwhitt
committed
4d395ed
fix(auth): make principal validation total
djwhitt
committed
87530f9
docs(auth): clarify context assign key
djwhitt
committed
ba98582
Merge remote-tracking branch 'origin/main' into oidc-auth-contracts
djwhitt
committed
30246d7
merge: sync OIDC contracts with main
djwhitt
committed
b222d02

Commits on Aug 16, 2026

merge: sync OIDC contracts with main
djwhitt
committed
64d805f
Derive compact_max_rows from the compaction engine's memory budget (T-262) (#166)

chasers
and
claude
authored
1eb7755
Bound ingest admission before the body is read (T-245) (#167)

chasers
and
claude
authored
5ae4639
Review fixes for the admission stack (T-264, T-265, T-266) (#169)

chasers
and
claude
authored
10b019b
merge: sync OIDC contracts with main
djwhitt
committed
94d6152