fix(recovery): authenticate restored tenant RLS policy - #243

Draft

seonghobae wants to merge 17 commits into

fix/recovery-evidence-weakref-coverage-b84f0c9from

fix/restore-catalog-policy-authentication-b84f0c9

Commits on Aug 17, 2026

test(recovery): reject permissive restore RLS decoy
seonghobae
committed
f9bfe13
fix(recovery): authenticate restored tenant RLS policy
seonghobae
committed
4065b5d
test(recovery): reject checkpoint RLS policy decoy
seonghobae
committed
d2c4b9f
test(recovery): pin tenant policy catalog contract
seonghobae
committed
cbc8e1d
fix(recovery): distinguish invalid optional RLS policy
seonghobae
committed
744cbbb
test(recovery): assert tenant-policy rejection category
seonghobae
committed
e8751b8

Commits on Aug 19, 2026

chore(stack): validate RLS policy authentication after coverage root
seonghobae
committed
98cf9c8

Commits on Sep 3, 2026

chore(pr243): reconcile restore policy authentication with current #233
seonghobae
committed
fc31bf1