feat(buzz-auth): NIP-FI Phase A PR 4 — production authority interface spine - #7117

Closed

wpfleger96 wants to merge 16 commits into

duncan/nip-fi-assertion-runtimefrom

hayt/nip-fi-pg-authority

Commits on Aug 28, 2026

feat(db): add NIP-FI identity + final-admission schema foundation

authored and
Hayt
committed
afed8a8
fix(buzz-db): drop stale relationship_revision_floor from invalidation guard
Hayt
committed
bfd9d37
fix(buzz-db): narrow identity_bindings policy FK and add provenance regression

Hayt
and
wpfleger96
committed
469e382
test(buzz-db): add absent-policy FK rejection to provenance regression

Hayt
and
wpfleger96
committed
15989f7
chore(buzz-db): renumber NIP-FI migrations 0040/0041 → 0041/0042
Hayt
committed
81d5992

Commits on Aug 29, 2026

fix(buzz-db): add NIP-FI Carl r2 guards — policy monotonicity, admission result cardinality, denial attempt binding

Hayt
and
wpfleger96
committed
1016f0a
fix(schema): address Thufir pass 1 blockers on NIP-FI PR 2

Hayt
and
wpfleger96
committed
12686a6
fix(schema): address Thufir pass 2 blockers on NIP-FI PR 2

Hayt
and
wpfleger96
committed
c52444b
test(buzz-db): replace barrier race with controlled lock-wait-observation schedule

Hayt
and
wpfleger96
committed
0534277

Commits on Aug 31, 2026

feat(auth): NIP-FI Phase A PR 3 — production assertion runtime

Duncan
and
wpfleger96
committed
f37b7e2
fix(auth): harden JWKS boundary, reject current-status, fix generation and comment quality

committed
d0057bb
fix(buzz-auth): close SSRF/redirect bypass in HttpJwksFetcher; trim internal markers

committed
673adbc
fix(buzz-auth): validate URI + full deadline + IPv6 safe path in fetch_jwks

Duncan
and
wpfleger96
committed
445302e
fix(buzz-auth): complete SSRF policy, cancellation-safe permit, and invariant tests

Duncan
and
wpfleger96
committed
620dca3
feat(buzz-auth,buzz-db): NIP-FI production authority interface spine

Hayt
and
wpfleger96
committed
39b90bc
Merge remote-tracking branch 'origin/main' into hayt/nip-fi-pg-authority
Hayt
committed
eab11dc