fix(security): move maintainer GitHub tokens behind capability files - #311

Closed

seonghobae wants to merge 13 commits into

mainfrom

fix/github-token-capability-ingress-1f4964

Commits on Aug 14, 2026

test(security): require file-backed GitHub credential ingress
seonghobae
committed
0223c62
fix(security): centralize delegated GitHub token capability read
seonghobae
committed
a24affa
fix(security): remove governance token from process environment
seonghobae
committed
0bc271c
fix(security): isolate governance audit token ingress
seonghobae
committed
8a88d9e
fix(security): isolate preflight governance token ingress
seonghobae
committed
2740c4d
test(security): bind governance credential capability contract
seonghobae
committed
9490c17
test(security): require explicit governance token capability
seonghobae
committed
221c0e6
test(security): require commercial loop token capability ingress
seonghobae
committed
3d1c2e0
fix(security): remove commercial loop token from process environment
seonghobae
committed
c672301
fix(security): isolate commercial loop token ingress
seonghobae
committed
4ac32fc
fix(security): isolate commercial dry-run token ingress
seonghobae
committed
4aeca67
test(security): bind maintainer token capability transport
seonghobae
committed
8b7f8fa
test(security): require bounded token capability consumers
seonghobae
committed
cd42883