fix(kpi): reject compact credential-shaped source IDs - #496

Draft

seonghobae wants to merge 34 commits into

mainfrom

fix/kpi-source-id-credential-labels

Commits on Aug 23, 2026

test(kpi): reject compact credential-shaped source ids
seonghobae
committed
d7240ba
test(kpi): keep source-id expectations aligned with policy
seonghobae
committed
0f086fc
fix(kpi): reject compact credential-shaped source ids
seonghobae
committed
dc7fe1e
test(kpi): reject password-shaped source IDs
seonghobae
committed
fec97a1
fix(kpi): reject password-shaped source IDs
seonghobae
committed
72a8804
test(kpi): reject control characters in source IDs
seonghobae
committed
134508f
fix(kpi): reject control characters in source IDs
seonghobae
committed
b0e8964
test(kpi): reject authorization-shaped source IDs
seonghobae
committed
cf90269
fix(kpi): reject authorization-shaped source IDs
seonghobae
committed
88cdb03
test(kpi): reject ambiguous Unicode source IDs
seonghobae
committed
6e5776c
fix(kpi): reject ambiguous Unicode source IDs
seonghobae
committed
35bc0d0
test(kpi): reject non-canonical Unicode spaces in source IDs
seonghobae
committed
e4028e5
fix(kpi): reject non-canonical Unicode spaces in source IDs
seonghobae
committed
7472691
test(kpi): require NFC provenance source identity
seonghobae
committed
f2e086e
fix(kpi): require NFC provenance source identity
seonghobae
committed
2f9abd3
test(kpi): reject compatibility-ambiguous source IDs
seonghobae
committed
587c01a
fix(kpi): require compatibility-canonical source IDs
seonghobae
committed
7b2659c
test(kpi): reject strong npm token source IDs
seonghobae
committed
9fdd8c8
fix(kpi): reject strong npm token source IDs
seonghobae
committed
15260fd
test(kpi): include source ID validator in exact coverage
seonghobae
committed
ed9b532
test(kpi): exercise source ID coverage branches
seonghobae
committed
6af6391
test(kpi): reject locator-shaped source IDs
seonghobae
committed
0ae23fa
fix(kpi): reject locator-shaped source IDs
seonghobae
committed
9994f74
test(kpi): reject non-hierarchical locator source IDs
seonghobae
committed
a3fe812
fix(kpi): reject non-hierarchical locator source IDs
seonghobae
committed
5b4bc50
test(kpi): reject executable locator source IDs
seonghobae
committed
89ee5ab
fix(kpi): reject executable locator source IDs
seonghobae
committed
059ff6a
test(kpi): reject credential assignment source IDs
seonghobae
committed
7c607d9
fix(kpi): reject credential assignment source IDs
seonghobae
committed
b4ec2d0
test(kpi): reject password-alias source credentials
seonghobae
committed
2c148c6
fix(kpi): reject password-alias source credentials
seonghobae
committed
1f6fd1f
test(kpi): reject percent-encoded source authority
seonghobae
committed
352bd94
fix(kpi): reject percent-encoded source authority
seonghobae
committed
ec62fd6
chore(kpi): converge current protected main
seonghobae
committed
4e2cadb

Navigation Menu

Uh oh!

fix(kpi): reject compact credential-shaped source IDs - #496

fix(kpi): reject compact credential-shaped source IDs#496
seonghobae wants to merge 34 commits into
mainfrom
fix/kpi-source-id-credential-labels

Commits on Aug 23, 2026

test(kpi): reject compact credential-shaped source ids

test(kpi): keep source-id expectations aligned with policy

fix(kpi): reject compact credential-shaped source ids

test(kpi): reject password-shaped source IDs

fix(kpi): reject password-shaped source IDs

test(kpi): reject control characters in source IDs

fix(kpi): reject control characters in source IDs

test(kpi): reject authorization-shaped source IDs

fix(kpi): reject authorization-shaped source IDs

test(kpi): reject ambiguous Unicode source IDs

fix(kpi): reject ambiguous Unicode source IDs

test(kpi): reject non-canonical Unicode spaces in source IDs

fix(kpi): reject non-canonical Unicode spaces in source IDs

test(kpi): require NFC provenance source identity

fix(kpi): require NFC provenance source identity

test(kpi): reject compatibility-ambiguous source IDs

fix(kpi): require compatibility-canonical source IDs

test(kpi): reject strong npm token source IDs

fix(kpi): reject strong npm token source IDs

test(kpi): include source ID validator in exact coverage

test(kpi): exercise source ID coverage branches

test(kpi): reject locator-shaped source IDs

fix(kpi): reject locator-shaped source IDs

test(kpi): reject non-hierarchical locator source IDs

fix(kpi): reject non-hierarchical locator source IDs

test(kpi): reject executable locator source IDs

fix(kpi): reject executable locator source IDs

test(kpi): reject credential assignment source IDs

fix(kpi): reject credential assignment source IDs

test(kpi): reject password-alias source credentials

fix(kpi): reject password-alias source credentials

test(kpi): reject percent-encoded source authority

fix(kpi): reject percent-encoded source authority

chore(kpi): converge current protected main