fix(security): broker production governance token capability - #396

Merged

seonghobae merged 8 commits into

mainfrom

fix/production-governance-token-capability

Aug 16, 2026

Commits on Aug 16, 2026

test(security): require production governance token capability
seonghobae
committed
551dc13
test(security): keep production token regression ESM-safe
seonghobae
committed
c212560
fix(security): read production governance token capability
seonghobae
committed
2337857
fix(security): broker production governance token via capability file
seonghobae
committed
cc558a9
test(security): reject ambient production governance token
seonghobae
committed
361ba19
refactor(testability): keep production token options branchless
seonghobae
committed
16bf12b
test(security): reject fixed token bootstrap directory
seonghobae
committed
92cbb09
fix(security): isolate delegated token bootstrap directory
seonghobae
committed
88b2e9a