feat(cloud): add operation ledgers and event contract - #5093

Merged

iscekic merged 61 commits into

mainfrom

audit-w3b-operation-ledgers-8e34

Aug 17, 2026

Commits on Aug 5, 2026

feat(analytics): add shared event contract
iscekic
committed
dd552ad
feat(db): add operation ledger and analytics outbox
iscekic
committed
f11f6b0

Commits on Aug 6, 2026

feat(analytics): add outbox dispatch cron
iscekic
committed
82f89a4
feat(mobile): track settled leaf screens
iscekic
committed
5368a60
feat(cloud-agent): make session creation retry safe
iscekic
committed
6695dbc
fix(db): record progress during session reconciliation
iscekic
committed
2b91bdf
fix(db): serialize ledger reconciliation by lease
iscekic
committed
08155b7
feat(pr-review): make mutations retry safe
iscekic
committed
55a4160
feat(security): make security and org writes retry safe
iscekic
committed
f3f913d
feat(cloud-agent-sdk): dedupe remote session creation
iscekic
committed
5c22793
test(session-ingest): update attention signal assertion
iscekic
committed
bc04d2e
fix(cloud-agent-sdk): verify remote replay classification
iscekic
committed
368e07e
fix(security): guard optional command ids
iscekic
committed
3360aaf
fix(analytics): await flush and key security dismissals
iscekic
committed
ec8f5a2
feat(mobile): stabilize session creation operation keys
iscekic
committed
dd4dc17
fix(mobile): verify remote operation key tests
iscekic
committed
095738b
fix(security): repair disabled routing and dismissal states
iscekic
committed
1035604
fix(mobile): preserve remote retry keys
iscekic
committed
eee1144
fix(cloud): preserve fallback and settlement recovery
iscekic
committed
43d178f
fix(security): retain terminal settlement and block retry
iscekic
committed
32e8065
fix(ledger): make security acceptance atomic
iscekic
committed
489c00c
test(db): cover atomic security acceptance
iscekic
committed
76be0f4
merge: sync main into audit branch
iscekic
committed
ffb8558
fix(db): reconcile merged migration history
iscekic
committed
aa9c0e4
fix(mobile): restore organization key narrowing
iscekic
committed
0646c4f
fix(ledger): preserve reconciliation evidence
iscekic
committed
1e9e489
fix(cloud): recheck metadata before ownership delete
iscekic
committed
d7a50be
merge: sync latest main changes
iscekic
committed
f5fb286
fix(organizations): adopt latest role APIs
iscekic
committed
f0c9709
fix(db): register operation ledger migration
iscekic
committed
461c963
fix(mobile): remove unused analytics exports
iscekic
committed
ffa7e88
fix(cloud): harden session reconciliation
iscekic
committed
619664f
fix(analytics): harden privacy key matching
iscekic
committed
98ae945
fix(cloud): bind session retries to intent
iscekic
committed
f662fd8
fix(org-members): settle authorization failures
iscekic
committed
be276b9
fix(security): classify missing service config
iscekic
committed
e8a5806
fix(mobile): rotate share spawn keys after ready
iscekic
committed
5041c4f
refactor(mobile): remove dormant prepare key path
iscekic
committed
4f457fc
fix(org-members): retry removal cleanup
iscekic
committed
0ef9e49

Commits on Aug 7, 2026

fix(security): fence keyed queue retries
iscekic
committed
69a4398
fix(mobile): isolate operation retry state
iscekic
committed
0caa181
fix(mobile): contain continuation post-success failures
iscekic
committed
b441a07
Merge remote-tracking branch 'origin/main' into audit-w3b-operation-ledgers-8e34
iscekic
committed
3c89f12
chore: retrigger review
iscekic
committed
836d1ca
chore: retrigger review
iscekic
committed
6b1397c

Commits on Aug 17, 2026

merge: sync latest main
iscekic
committed
7d8bfa8
fix(mobile): update native test mocks
iscekic
committed
60faa4d
refactor(cloud): simplify operation ledgers and event contract
iscekic
committed
a27fdeb
fix(cloud): remove redundant ledger reads and correct audit copy
iscekic
committed
ddd8ac6
refactor(cloud): share runAfterResponse and sha256 helpers
iscekic
committed
8fe4359
refactor(organizations): drop the operation ledger from member writes
iscekic
committed
9aa0a0b
refactor(pr-review): share the intent fingerprint across web and mobile
iscekic
committed
d7c400d
refactor(security): key command retries on the command row
iscekic
committed
38cba03
refactor(mobile): move the operation key out of the PR merge module
iscekic
committed
c8f6912
refactor(mobile): split the two hooks that silenced max-lines
iscekic
committed
cc12708
merge: sync latest main
iscekic
committed
fbf6b97
fix(cloud-agent-next): abandon a create whose RPC is lost
iscekic
committed
51c6fb7
refactor(db): squash the ledger migrations and partial-index provider_ref
iscekic
committed
28dec1d
fix(security): settle command ledgers in worker
iscekic
committed
5b121f8
fix(security): preserve dismissal analytics identity
iscekic
committed
4cdebb1
fix: address operation ledger review findings
iscekic
committed
f628e57