fix(scope): legacy and internal cache entries refused for every caller, kind-first authorization, monotone child provenance (Spec 105 PR B, FR-001/002) - #1282

Merged

Dumbris merged 11 commits into

mainfrom

Sep 18, 2026

Commits on Sep 16, 2026

test(scope): Spec 105 PR B red phase — legacy/internal cache refusal, kind-first gate, monotone child provenance, non-disclosing read_cache (T021–T027)

Dumbris
and
claude
committed
77ec793
feat(scope): Spec 105 PR B — legacy/internal cache refusal, kind-first gate, monotone child provenance, non-disclosing read_cache (T028–T032)

Dumbris
and
claude
committed
4037b93
fix(scope): PR B critique round 1 — refusals commit like a miss (timing class), unknown kinds are legacy, stats never drift, expired internal entries kept

Dumbris
and
claude
committed
781a906
fix(scope): PR B codex round 1 — empty server grant is deny-all on cache redemption

Dumbris
and
claude
committed
3d61d4d
fix(scope): PR B codex round 2 — deny-all producer snapshots, commit-failure stats, header-only refusals

Dumbris
and
claude
committed
09a091c
fix(scope): PR B codex round 3 — header/body agreement, write-time header bound, pre-frame size accounting

Dumbris
and
claude
committed
7a30bd5
fix(cache): guard the frame allocation size against overflow (CodeQL)

Dumbris
and
claude
committed
66d9eb9
fix(scope): PR B codex round 4 — user containment, content-addressed snapshots, exact pre-frame accounting

Dumbris
and
claude
committed
9485653
test(server): restore the registry SSRF allow-policy after the internal-cache fixture

Dumbris
and
claude
committed
d0c6675
fix(scope): PR B review round 5 — header-only read gate (research D16), no legacy decode

Dumbris
and
claude
committed
2e33ecd
fix(scope): PR B review round 6 — reserved header bits are unrecognised provenance; admitted readers never get the refusal shape

Dumbris
and
claude
committed
65bc97d