feat(buzz-relay): NIP-FI Phase A PR 4 — PostgreSQL-final authority for kind-9 (Design B) - #7150

Closed

wpfleger96 wants to merge 20 commits into

duncan/nip-fi-assertion-runtimefrom

hayt/nip-fi-pg-authority-r5

Commits on Aug 31, 2026

feat(db): add NIP-FI identity + final-admission schema foundation

authored and
Hayt
committed
bafdff9
fix(buzz-db): drop stale relationship_revision_floor from invalidation guard
Hayt
committed
738655d
fix(buzz-db): narrow identity_bindings policy FK and add provenance regression

Hayt
and
wpfleger96
committed
315740d
test(buzz-db): add absent-policy FK rejection to provenance regression

Hayt
and
wpfleger96
committed
a83d29e
chore(buzz-db): renumber NIP-FI migrations 0040/0041 → 0041/0042
Hayt
committed
a862dd4
fix(buzz-db): add NIP-FI Carl r2 guards — policy monotonicity, admission result cardinality, denial attempt binding

Hayt
and
wpfleger96
committed
152c507
fix(schema): address Thufir pass 1 blockers on NIP-FI PR 2

Hayt
and
wpfleger96
committed
5ba7d26
fix(schema): address Thufir pass 2 blockers on NIP-FI PR 2

Hayt
and
wpfleger96
committed
fd2a79b
test(buzz-db): replace barrier race with controlled lock-wait-observation schedule

Hayt
and
wpfleger96
committed
fc309e6
fix(schema): correct NIP-FI authorization shape/cardinality contracts and add regressions

Hayt
and
wpfleger96
committed
3c2c919
fix(schema): enforce zero mapped-success events for denied lifecycle receipts

Hayt
and
wpfleger96
committed
156ced4
test(buzz-db): isolate event-side trigger and add applied lifecycle fixture

Hayt
and
wpfleger96
committed
bd851f8
feat(auth): NIP-FI Phase A PR 3 — production assertion runtime

committed
5d7cf01
fix(auth): harden JWKS boundary, reject current-status, fix generation and comment quality

committed
e78bafa
fix(buzz-auth): close SSRF/redirect bypass in HttpJwksFetcher; trim internal markers

committed
e5736b8
fix(buzz-auth): validate URI + full deadline + IPv6 safe path in fetch_jwks

Duncan
and
wpfleger96
committed
30e68bd
fix(buzz-auth): complete SSRF policy, cancellation-safe permit, and invariant tests

Duncan
and
wpfleger96
committed
122ac43
feat(buzz-relay): NIP-FI Phase A PR 4 — PostgreSQL final authority (Design B)

Hayt
and
wpfleger96
committed
a82d476
Merge remote-tracking branch 'origin/main' into hayt/nip-fi-pg-authority-r5
Hayt
committed
be004c2
fix(buzz-relay): close authority comparison gaps and strengthen compile-fail fixtures

Hayt
and
wpfleger96
committed
120be31

Navigation Menu

Uh oh!

feat(buzz-relay): NIP-FI Phase A PR 4 — PostgreSQL-final authority for kind-9 (Design B) - #7150

feat(buzz-relay): NIP-FI Phase A PR 4 — PostgreSQL-final authority for kind-9 (Design B)#7150
wpfleger96 wants to merge 20 commits into
duncan/nip-fi-assertion-runtimefrom
hayt/nip-fi-pg-authority-r5

Commits on Aug 31, 2026

feat(db): add NIP-FI identity + final-admission schema foundation

fix(buzz-db): drop stale relationship_revision_floor from invalidation guard

fix(buzz-db): narrow identity_bindings policy FK and add provenance regression

test(buzz-db): add absent-policy FK rejection to provenance regression

chore(buzz-db): renumber NIP-FI migrations 0040/0041 → 0041/0042

fix(buzz-db): add NIP-FI Carl r2 guards — policy monotonicity, admission result cardinality, denial attempt binding

fix(schema): address Thufir pass 1 blockers on NIP-FI PR 2

fix(schema): address Thufir pass 2 blockers on NIP-FI PR 2

test(buzz-db): replace barrier race with controlled lock-wait-observation schedule

fix(schema): correct NIP-FI authorization shape/cardinality contracts and add regressions

fix(schema): enforce zero mapped-success events for denied lifecycle receipts

test(buzz-db): isolate event-side trigger and add applied lifecycle fixture

feat(auth): NIP-FI Phase A PR 3 — production assertion runtime

fix(auth): harden JWKS boundary, reject current-status, fix generation and comment quality

fix(buzz-auth): close SSRF/redirect bypass in HttpJwksFetcher; trim internal markers

fix(buzz-auth): validate URI + full deadline + IPv6 safe path in fetch_jwks

fix(buzz-auth): complete SSRF policy, cancellation-safe permit, and invariant tests

feat(buzz-relay): NIP-FI Phase A PR 4 — PostgreSQL final authority (Design B)

Merge remote-tracking branch 'origin/main' into hayt/nip-fi-pg-authority-r5

fix(buzz-relay): close authority comparison gaps and strengthen compile-fail fixtures