feat(runtime): current-upstream shared auth and result-metadata convergence - #5

Closed

cermm wants to merge 53 commits into

review-base-358-380-afc54from

legacy-convergence-358-380-afc54

Commits on Jul 12, 2026

fix(photon): update OpenTelemetry security overrides

cermm
and
Hermes Agent
authored
bceb0be
fix(ui-tui): stabilize rendering regression suite

cermm
and
Hermes Agent
authored
d636376
fix(website): clear dependency audit and restore gates

cermm
and
Hermes Agent
authored
e66122f

Commits on Jul 23, 2026

feat(auth): add shared credential authority and migration
Hermes Agent
committed
9c3efd0
Merge remote-tracking branch 'origin/main' into fix/issue-380-shared-auth-authority
Hermes Agent
committed
364892a
fix(auth): harden shared authority migration and restore
Hermes Agent
committed
71be318
Merge origin/main into fix/issue-380-shared-auth-authority
Hermes Agent
committed
299ff9c
fix(auth): enforce shared authority across restore backends
Hermes Agent
committed
9b2d7ce

Commits on Jul 24, 2026

Merge remote-tracking branch 'origin/main' into fix/issue-380-shared-auth-authority
Hermes Agent
committed
673ea11
[verified] fix(auth): harden shared authority candidate
Hermes Agent
committed
bfe4852
fix(auth): close auth consumer scanner bypasses
Hermes Agent
committed
807be8d
Merge remote-tracking branch 'origin/main' into fix/issue-380-shared-auth-authority
Hermes Agent
committed
d31f699
fix(auth): detect aliased auth-store consumers
Hermes Agent
committed
00d2cfd
Merge remote-tracking branch 'origin/main' into fix/issue-380-shared-auth-authority
Hermes Agent
committed
6f3d333
fix(auth): harden auth consumer scanner coverage
Hermes Agent
committed
3ab8d52
fix(auth): close scanner scope bypasses
Hermes Agent
committed
7810078
Merge remote-tracking branch 'origin/main' into fix/issue-380-shared-auth-authority
Hermes Agent
committed
b1db73f
[verified] fix(auth): close remaining authority audit gaps
Hermes Agent
committed
2940bda
fix(auth): close scanner wrapper and budget gaps
Hermes Agent
committed
a72f55c
fix(auth): close bounded scanner wrapper gaps
Hermes Agent
committed
2f625cb
fix(auth): expand static starred Path arguments
Hermes Agent
committed
65bcce1
fix(auth): flatten nested static Path unpacking
Hermes Agent
committed
23da1b3
fix(auth): bound callable sequence expansion
Hermes Agent
committed
36222bd
Merge commit '8611b69dad0a3cecd09f3b31cdce0a5388605bd3' into fix/issue-380-shared-auth-authority
Hermes Agent
committed
ea0897f
Merge origin/main into fix/issue-380-shared-auth-authority
Hermes Agent
committed
b3c8bac
Merge origin/main into fix/issue-380-shared-auth-authority
Hermes Agent
committed
4a114c2
fix(auth): fail closed on exact-cap call products
Hermes Agent
committed
1522b07
Merge accepted #380 shared auth authority onto current upstream
Hermes Agent
committed
627f2b0
feat(cli): add producer-bound result metadata fd transport
Hermes Agent
committed
16da195
Merge current upstream into combined #358/#380 runtime candidate
Hermes Agent
committed
3575992
Merge upstream 4a9447c into combined #358/#380 runtime candidate
Hermes Agent
committed
cf4d2e6
Merge upstream 7dd00bb into combined #358/#380 runtime candidate
Hermes Agent
committed
2923136
fix(desktop): restore perf launcher runtime imports
Hermes Agent
committed
6977a09
Merge upstream 306c9f into repaired combined #358/#380 runtime candidate
Hermes Agent
committed
59bc11a

Commits on Jul 25, 2026

Merge pinned upstream into combined #358/#380 runtime
Hermes Agent
committed
9151a2c
fix(runtime): harden auth authority restore boundaries
Hermes Agent
committed
9349d69
fix(result-metadata): reject contradictory statuses
Hermes Agent
committed
7c52d17
Merge frozen upstream 760112ad into combined #358/#380 runtime
Hermes Agent
committed
5a931ff

Commits on Jul 27, 2026

fix(auth): preserve canonical oauth refresh authority
Hermes Agent
committed
b5b0dbb
merge: converge #358/#380 runtime onto current upstream
Hermes Agent
committed
11820ad
merge: publish #358/#380 runtime evidence on frozen upstream
Hermes Agent
committed
71b9ea7
merge: retain fork runtime hardening on publication candidate
Hermes Agent
committed
e0d64a7
merge: freeze #358/#380 release at upstream 5646fed97
Hermes Agent
committed
5984ae6

Commits on Jul 30, 2026

merge: integrate auth authority runtime onto current upstream
Hermes Agent
committed
234d953

Commits on Jul 31, 2026

Merge auth authority candidate and harden profile creation races
Hermes Agent
committed
77c4863
Merge auth authority hardening onto current upstream
Hermes Agent
committed
f9c7c27
Merge auth authority hardening onto current upstream
Hermes Agent
committed
4926b92
fix(profiles): make creation publication identity-safe
Hermes Agent
committed
dcf6636
Merge identity-safe profile auth lifecycle onto current upstream
Hermes Agent
committed
dce0261
fix(profiles): bind creation transaction identity
Hermes Agent
committed
8a1aeaf
Merge identity-safe profile creation onto current upstream
Hermes Agent
committed
8c0e2eb
fix(profiles): bind metadata publication identity
Hermes Agent
committed
21b21db
Merge metadata-safe profile creation onto current upstream
Hermes Agent
committed
a7fa5fd