All pull requests

Pull requests

• fix(zwallet): require signed tenant admission for billing mutations

  #354·cvsz opened Oct 28, 2026Owner·

  ·
  41

• feat(billing): add PostgreSQL ledger with fail-closed tenant gates

  #353·cvsz opened Oct 28, 2026Owner·

  ·
  216

• fix(security): remove voice token fallback on current main

  #352·cvsz opened Oct 28, 2026Owner·

  ·
  19

• fix(zwallet): reconcile retryable billing 503 contract onto current main

  #351·cvsz opened Oct 28, 2026Owner·

  ·
  23

• fix(billing): contain public ZWallet adapter mutations

  #344·cvsz opened Oct 27, 2026Owner·

  ·
  15

• fix(governance): enforce independent code-owner release contract

  #343·cvsz opened Oct 27, 2026Owner·

  ·
  6

• feat(ztrader): add tenant-scoped paper trading ledger

  #340·cvsz opened Oct 26, 2026Owner·

  ·
  66

• fix(cloudflare): verify recovery token persistence before reporting success

  #329·cvsz opened Oct 25, 2026Owner·

  ·
  6

• fix(billing): reject duplicate JSON claims in signed financial JWTs

  #328·cvsz opened Oct 24, 2026Owner·

  ·
  7

• fix(billing): reject ambiguous multi-audience financial JWTs

  #327·cvsz opened Oct 24, 2026Owner·

  ·
  4

• test(billing): gate audited PG17 membership revocation and replay

  #326·cvsz opened Oct 24, 2026Owner·

  ·
  55

• test(billing): enforce disposable PG17 authoritative membership and revocation

  #325·cvsz opened Oct 23, 2026Owner·

  ·
  8

• test(billing): add pinned bounded JWKS transport and rotation contracts

  #324·cvsz opened Oct 23, 2026Owner·

  ·
  13

• test(billing): add fail-closed signed tenant identity candidate

  #323·cvsz opened Oct 23, 2026Owner·

  ·
  12

• test(billing): verify PG17 backend termination recovery and same-key replay

  #322·cvsz opened Oct 23, 2026Owner·

  ·
  13

• fix(billing): reject ambiguous PostgreSQL financial timestamps

  #321·cvsz opened Oct 23, 2026Owner·

  ·
  14

• test(billing): add isolated PG17 tenant-bound adapter contract and dedicated login acceptance

  #320·cvsz opened Oct 23, 2026Owner·

  ·
  43

• test(billing): gate financial PostgreSQL 17 SQL invariants on disposable CI

  #319·cvsz opened Oct 23, 2026Owner·

  ·
  30

• fix(billing): reject forged initial invoice status at direct store boundary

  #318·cvsz opened Oct 23, 2026Owner·

  ·
  4

• fix(billing): reject conflicting financial idempotency replays

  #317·cvsz opened Oct 23, 2026Owner·

  ·
  45

• fix(billing): reject unsafe invoice minor units at direct-store boundary

  #316·cvsz opened Oct 23, 2026Owner·

  ·
  12

• fix(billing): isolate in-memory idempotency keys by tenant

  #315·cvsz opened Oct 23, 2026Owner·

  ·
  46

• fix(billing): fail closed on unsafe financial HTTP mutations

  #314·cvsz opened Oct 23, 2026Owner·

  ·
  35

• [Aikido] Fix 12 security issues in follow-redirects, zod, pg and 2 more

  #313·aikido-autofix[bot] opened Oct 21, 2026Bot·25 tasks·

  ·
  5

• [Aikido] Fix 13 security issues in next, follow-redirects, zod and 3 more

  #312·aikido-autofix[bot] opened Oct 21, 2026Bot·25 tasks·

  ·
  4