Implement roadmap_aug10: authorization, storage parity, Iceberg conformance and the guardrails that catch them - #1

Merged

AlexMercedCoder merged 24 commits into

mainfrom

audit/roadmap-aug10

Aug 11, 2026

Commits on Aug 10, 2026

fix(api): close the authorization bypasses and Iceberg conformance gaps

AlexMercedCoder
and
claude
committed
89f0692
fix(store): align the four backends and add a cross-backend parity suite

AlexMercedCoder
and
claude
committed
bdcfdb0
fix(deploy,docs): make the quick start work and stop the config drifting

AlexMercedCoder
and
claude
committed
93fdd71
fix(ui,api): reconnect the management UI to the server it talks to

AlexMercedCoder
and
claude
committed
aec5a77
fix(clients): make the CLIs and SDK talk to the API that exists

AlexMercedCoder
and
claude
committed
0ebe817
test(ci): add the permission matrix and wire every guardrail into CI

AlexMercedCoder
and
claude
committed
a905c80
docs(changelog): record the roadmap_aug10 audit remediation

AlexMercedCoder
and
claude
committed
43d995c
fix(store,release): repair the SQLite upgrade path and four defects only a

AlexMercedCoder
and
claude
committed
e64b5d5
test(mongo): exercise the replica-set paths, and fix the B21 they exposed

AlexMercedCoder
and
claude
committed
b7ebe70
fix(mongo): audit every collection for the UUID encoding asymmetry

AlexMercedCoder
and
claude
committed
bc9120b
fix(ui): green test suite, and the defects it was hiding

AlexMercedCoder
and
claude
committed
ded790c
fix(ci): the guardrail jobs had never run, and one guard flagged its comments

AlexMercedCoder
and
claude
committed
0326a72
chore(deps): clear the advisories a lockfile update can reach

AlexMercedCoder
and
claude
committed
214e13b
fix(deps,features): clear every advisory, and the cloud features that never built

AlexMercedCoder
and
claude
committed
a2c3400
fix(ci): cargo audit was not reading the exceptions it was meant to

AlexMercedCoder
and
claude
committed
d300071
fix(release): the release pipeline had never produced a release

AlexMercedCoder
and
claude
committed
b685c78

Commits on Aug 11, 2026

fix(api): the server shut itself down 25 seconds after startup

AlexMercedCoder
and
claude
committed
947922c
fix(ci): supply the release harness's variables to the compose validation

AlexMercedCoder
and
claude
committed
0247796
feat(api): throttle the authentication endpoints (C-5)

AlexMercedCoder
and
claude
committed
73dadb2
feat(store): encrypt warehouse cloud credentials at rest (C-11)

AlexMercedCoder
and
claude
committed
cc7c32d
fix(store,api): make branch-create-by-copy atomic, and stop it reporting success (A-24)

AlexMercedCoder
and
claude
committed
60ae054
feat(mongo): manage the index set, and enforce the uniqueness the SQL backends have

AlexMercedCoder
and
claude
committed
3a044c8
feat: complete the non-OIDC production-readiness work, and reconcile the roadmaps

AlexMercedCoder
and
claude
committed
6357385
feat(auth): implement OpenID Connect (C-2/C-3)

AlexMercedCoder
and
claude
committed
8f3fd53

Navigation Menu

Implement roadmap_aug10: authorization, storage parity, Iceberg conformance and the guardrails that catch them - #1

Implement roadmap_aug10: authorization, storage parity, Iceberg conformance and the guardrails that catch them#1
AlexMercedCoder merged 24 commits into
mainfrom
audit/roadmap-aug10

Commits on Aug 10, 2026

fix(api): close the authorization bypasses and Iceberg conformance gaps

fix(store): align the four backends and add a cross-backend parity suite

fix(deploy,docs): make the quick start work and stop the config drifting

fix(ui,api): reconnect the management UI to the server it talks to

fix(clients): make the CLIs and SDK talk to the API that exists

test(ci): add the permission matrix and wire every guardrail into CI

docs(changelog): record the roadmap_aug10 audit remediation

fix(store,release): repair the SQLite upgrade path and four defects only a

test(mongo): exercise the replica-set paths, and fix the B21 they exposed

fix(mongo): audit every collection for the UUID encoding asymmetry

fix(ui): green test suite, and the defects it was hiding

fix(ci): the guardrail jobs had never run, and one guard flagged its comments

chore(deps): clear the advisories a lockfile update can reach

fix(deps,features): clear every advisory, and the cloud features that never built

fix(ci): cargo audit was not reading the exceptions it was meant to

fix(release): the release pipeline had never produced a release

Commits on Aug 11, 2026

fix(api): the server shut itself down 25 seconds after startup

fix(ci): supply the release harness's variables to the compose validation

feat(api): throttle the authentication endpoints (C-5)

feat(store): encrypt warehouse cloud credentials at rest (C-11)

fix(store,api): make branch-create-by-copy atomic, and stop it reporting success (A-24)

feat(mongo): manage the index set, and enforce the uniqueness the SQL backends have

feat: complete the non-OIDC production-readiness work, and reconcile the roadmaps

feat(auth): implement OpenID Connect (C-2/C-3)