Repository navigation

feat(policy): authorize immutable filesystem scopes over TinyBus - #3

Merged

senamakel merged 15 commits into

mainfrom

security-oh-migration-7331

Oct 10, 2026

Commits on Oct 10, 2026
- feat(policy): authorize immutable filesystem scopes over TinyBus
  
  senamakel
  and
  medullabot
  committed
  93c2bb4
- test(bus): pin every immutable filesystem payload shape
  
  senamakel
  and
  medullabot
  committed
  42fceac
- fix(policy): resolve native authorization queries and preserve scoped restrictions
  
  senamakel
  and
  medullabot
  committed
  4daf610
- test(policy): use a native absolute outside-root fixture
  
  senamakel
  and
  medullabot
  committed
  e236cd2
- fix(policy): normalize reserved names and root relative path restrictions
  
  senamakel
  and
  medullabot
  committed
  1e32db5
- fix(policy): reject empty filesystem paths
  
  senamakel
  and
  medullabot
  committed
  2f0c51d
- fix(policy): confine compiled scope construction to validated registry
  
  senamakel
  and
  medullabot
  committed
  f0b41b0
- fix(policy): fail closed on unresolved path authorization
  
  senamakel
  and
  medullabot
  committed
  efca909
- fix(policy): reject ambiguous Windows roots and stream aliases
  
  senamakel
  and
  medullabot
  committed
  bcb7027
- fix(policy): propagate prospective target inspection errors
  
  senamakel
  and
  medullabot
  committed
  5e90937
- fix(policy): contain reservation exceptions and repair native fixtures
  
  senamakel
  and
  medullabot
  committed
  bc9d736
- fix(example): satisfy Windows option mapping lint
  
  senamakel
  and
  medullabot
  committed
  f9b5bdc
- fix(policy): isolate registration I/O and preserve protected denials
  
  senamakel
  and
  medullabot
  committed
  8c5ea65
- test(policy): use canonical roots for workspace precedence fixture
  
  senamakel
  and
  medullabot
  committed
  5518861
- style(policy): format canonical workspace fixture
  
  senamakel
  and
  medullabot
  committed
  b35eaca

Navigation Menu

Repository navigation

feat(policy): authorize immutable filesystem scopes over TinyBus - #3

feat(policy): authorize immutable filesystem scopes over TinyBus#3
senamakel merged 15 commits into
mainfrom
security-oh-migration-7331

Commits on Oct 10, 2026

feat(policy): authorize immutable filesystem scopes over TinyBus

test(bus): pin every immutable filesystem payload shape

fix(policy): resolve native authorization queries and preserve scoped restrictions

test(policy): use a native absolute outside-root fixture

fix(policy): normalize reserved names and root relative path restrictions

fix(policy): reject empty filesystem paths

fix(policy): confine compiled scope construction to validated registry

fix(policy): fail closed on unresolved path authorization

fix(policy): reject ambiguous Windows roots and stream aliases

fix(policy): propagate prospective target inspection errors

fix(policy): contain reservation exceptions and repair native fixtures

fix(example): satisfy Windows option mapping lint

fix(policy): isolate registration I/O and preserve protected denials

test(policy): use canonical roots for workspace precedence fixture

style(policy): format canonical workspace fixture