Repository navigation

T080, 16.3: the credential stays a reference, and a raw key is refused (plan 034) - #63

Merged

brettheap merged 30 commits into

mainfrom

build/034-p3b-t080-raw-key-refusal

Oct 3, 2026

Commits on Sep 28, 2026
- T078: 16.1, the OpenAI-compatible dialect joins DIALECTS (plan 034)
  
  brettheap
  and
  claude
  committed
  4514a9e
- T079: 16.2, a `model` field the provider receives (plan 034)
  
  brettheap
  and
  claude
  committed
  7c83c2c
- T080: 16.3, the credential stays a reference; a raw key is refused (plan 034)
  
  brettheap
  and
  claude
  committed
  e9ef951
- T078: one throwing call per pytest.raises block in the new tests (SonarCloud)
  
  brettheap
  and
  claude
  committed
  6e1b894
- Merge T078's SonarCloud test fix into T079's branch
  
  brettheap
  and
  claude
  committed
  a63dcb8
- T079: the intake module's docstring stops counting the binding's fields
  
  brettheap
  and
  claude
  committed
  053e207
- Merge T079's branch (T078's SonarCloud fix, the intake docstring) into T080's
  
  brettheap
  and
  claude
  committed
  15adc2b
- T080: bound the endpoint before the detector; present only what a bearer can carry
  
  brettheap
  and
  claude
  committed
  f92fca4
- T080: the stand-in server's record is reset through monkeypatch (SonarCloud)
  
  brettheap
  and
  claude
  committed
  68b6e41
- T080: the console flow's kinds are the ones a broker enrols, said and pinned
  
  brettheap
  and
  claude
  committed
  146b5a2
- T080: a built-in credential travels only over https:// or to this host
  
  brettheap
  and
  claude
  committed
  4abc6d4
- T080: the endpoint's checks and the private-route rule move into two helpers (SonarCloud)
  
  brettheap
  and
  claude
  committed
  d240fd5
- T080: a request carrying a built-in credential follows no redirect
  
  brettheap
  and
  claude
  committed
  5167084
- T080: no frame a refusal keeps holds a raw credential
  
  brettheap
  and
  claude
  committed
  1b0fb3f
- T080: a built-in credential over plain http:// uses no proxy
  
  brettheap
  and
  claude
  committed
  286655f
- T080: a broker's reference may not take a built-in form; keyring failures keep no context
  
  brettheap
  and
  claude
  committed
  3f14bb9
Commits on Oct 2, 2026
- Merge main 047bb4fa into T078 (phase 2 has landed)
  
  brettheap
  and
  claude
  committed
  d07b937
- Merge T078's head d07b9371 into T079 (main 047bb4fa)
  
  brettheap
  and
  claude
  committed
  b04a3a9
- Merge T079's head b04a3a95 into T080 (main 047bb4fa)
  
  brettheap
  and
  claude
  committed
  4948e6d
Commits on Oct 3, 2026
- Merge main 8a98e317 into T079 (T078 landed as #61)
  
  brettheap
  and
  claude
  committed
  cb059d5
- T080: refuse a raw key's shape, fix the scheme refusal, map http.client errors
  
  brettheap
  and
  claude
  committed
  645280a
- Merge T079's head cb059d5d into T080 (main 8a98e317, T078 landed)
  
  brettheap
  and
  claude
  committed
  03fb779
- T079: doxbench_intake's docstring names each shape that grew (Copilot at cb059d5d)
  
  brettheap
  and
  claude
  committed
  e7f3a7b
- Merge T079's head e7f3a7b3 into T080 (Copilot's docstring fix on #62)
  
  brettheap
  and
  claude
  committed
  abbb05d
- Merge main 2fc714d2 into T080 (T079 landed as #62)
  
  brettheap
  and
  claude
  committed
  93660ec
- T080: the scheme refusal says nothing of hosts (Copilot at abbb05d4)
  
  brettheap
  and
  claude
  committed
  82ec9a2
- T080: SonarCloud at 82ec9a20 (S5713 in the transport, S5778 x4 in tests)
  
  brettheap
  and
  claude
  committed
  67d0061
- T080: a keyring package that fails as it is imported refuses like a failed read (Copilot at 82ec9a20)
  
  brettheap
  and
  claude
  committed
  44582f8
- T080: the L4 case runs a broker's turn too (Copilot at 44582f8f)
  
  brettheap
  and
  claude
  committed
  47c9da9
- Merge main 9a490405 into T080 (T081 landed as #74)
  
  brettheap
  and
  claude
  committed
  05cb1c7

Navigation Menu

Repository navigation

T080, 16.3: the credential stays a reference, and a raw key is refused (plan 034) - #63

T080, 16.3: the credential stays a reference, and a raw key is refused (plan 034)#63
brettheap merged 30 commits into
mainfrom
build/034-p3b-t080-raw-key-refusal

Commits on Sep 28, 2026

T078: 16.1, the OpenAI-compatible dialect joins DIALECTS (plan 034)

T079: 16.2, a `model` field the provider receives (plan 034)

T080: 16.3, the credential stays a reference; a raw key is refused (plan 034)

T078: one throwing call per pytest.raises block in the new tests (SonarCloud)

Merge T078's SonarCloud test fix into T079's branch

T079: the intake module's docstring stops counting the binding's fields

Merge T079's branch (T078's SonarCloud fix, the intake docstring) into T080's

T080: bound the endpoint before the detector; present only what a bearer can carry

T080: the stand-in server's record is reset through monkeypatch (SonarCloud)

T080: the console flow's kinds are the ones a broker enrols, said and pinned

T080: a built-in credential travels only over https:// or to this host

T080: the endpoint's checks and the private-route rule move into two helpers (SonarCloud)

T080: a request carrying a built-in credential follows no redirect

T080: no frame a refusal keeps holds a raw credential

T080: a built-in credential over plain http:// uses no proxy

T080: a broker's reference may not take a built-in form; keyring failures keep no context

Commits on Oct 2, 2026

Merge main 047bb4fa into T078 (phase 2 has landed)

Merge T078's head d07b9371 into T079 (main 047bb4fa)

Merge T079's head b04a3a95 into T080 (main 047bb4fa)

Commits on Oct 3, 2026

Merge main 8a98e317 into T079 (T078 landed as #61)

T080: refuse a raw key's shape, fix the scheme refusal, map http.client errors

Merge T079's head cb059d5d into T080 (main 8a98e317, T078 landed)

T079: doxbench_intake's docstring names each shape that grew (Copilot at cb059d5d)

Merge T079's head e7f3a7b3 into T080 (Copilot's docstring fix on #62)

Merge main 2fc714d2 into T080 (T079 landed as #62)

T080: the scheme refusal says nothing of hosts (Copilot at abbb05d4)

T080: SonarCloud at 82ec9a20 (S5713 in the transport, S5778 x4 in tests)

T080: a keyring package that fails as it is imported refuses like a failed read (Copilot at 82ec9a20)

T080: the L4 case runs a broker's turn too (Copilot at 44582f8f)

Merge main 9a490405 into T080 (T081 landed as #74)