fix(security): fail closed on ambiguous dependency-review HTTP responses - #1725

Draft

seonghobae wants to merge 15 commits into

mainfrom

fix/dependency-review-non200-fail-closed

Commits on Sep 2, 2026

test(security): require non-200 dependency review fail-closed
seonghobae
committed
cb07b8b
fix(security): fail closed on dependency graph non-200
seonghobae
committed
31f60e5
test(security): require caller permission envelope
seonghobae
committed
ee0f1ce
fix(security): preserve dependency-review caller permissions
seonghobae
committed
ca3bdbd
docs(security): record dependency-review authority boundary
seonghobae
committed
6d288ff
merge(main): preserve concurrent control-plane repairs
seonghobae
committed
403ca1c
merge(main): preserve dependency-review control-plane fixes
seonghobae
committed
ca7cb12
test(security): preserve latest reusable dependency-review contract
seonghobae
committed
2595e24
merge(main): preserve dependency-review owner and current controls
seonghobae
committed
754121d
test(security): require immutable dependency-review identities
seonghobae
committed
3736634
fix(security): validate immutable dependency-review identity
seonghobae
committed
b1e6263
fix(security): carry exact identity validation into bundled scan
seonghobae
committed
8b86c0d
docs(security): record authenticated dependency-review evidence
seonghobae
committed
ae12837
test(security): preserve bundled dependency-review identity gate
seonghobae
committed
58a0b4c

Commits on Sep 3, 2026

Merge branch 'main' into fix/dependency-review-non200-fail-closed
seonghobae
authored
6e8998f