fix(planning): bind signed workspace authority to request - #188

Merged

seonghobae merged 13 commits into

mainfrom

fix/planning-request-bound-authority-d39c946

Aug 11, 2026

Commits on Aug 11, 2026

test(planning): prove workspace context replay boundary
seonghobae
committed
0d3a94e
fix(planning): bind workspace context to request
seonghobae
committed
223a031
test(planning): avoid credential-shaped replay fixture
seonghobae
committed
8295c67
test(planning): migrate trusted context fixtures to v2
seonghobae
committed
60885e5
fix(planning): enforce request-bound authority on routes
seonghobae
committed
1657db2
fix(web): sign Planning request identity
seonghobae
committed
64d0cc0
fix(web): bind Today context to method and date
seonghobae
committed
f382d8f
test(planning): bind controller authority fixtures to routes
seonghobae
committed
c32338f
test(gateway): require request-bound Planning Today signature
seonghobae
committed
e2937ca
fix(gateway): bind Planning Today signature to request
seonghobae
committed
45a5134
test(planning): cover rejected request bindings
seonghobae
committed
83f4e05
test(planning): do not swallow expected rejection sentinel
seonghobae
committed
38f41a0
docs(gateway): explain workspace signing fallback
seonghobae
committed
efe2a42