fix(security): access control, A2A ownership, GDPR & audit ledger (wave 2a) - #617

Merged

ginccc merged 31 commits into

mainfrom

fix/code-review-access-control

Jul 29, 2026

Commits on Jul 28, 2026

fix(security): code-review findings wave 2a — access control, A2A ownership, GDPR & audit ledger
ginccc
committed
e507769
Merge branch 'fix/code-review-findings' into fix/code-review-access-control
ginccc
committed
d5989a0
Merge branch 'fix/code-review-findings' into fix/code-review-access-control
ginccc
committed
205f952
Merge branch 'fix/code-review-findings' into fix/code-review-access-control
ginccc
committed
91f6e1c
docs(changelog): record the wave 2a entry on its own branch
ginccc
committed
a06068c
Merge remote-tracking branch 'origin/main' into fix/code-review-access-control
ginccc
committed
03c3753
fix(gdpr): ship deleteAllForUser with its caller, and address CI + review feedback
ginccc
committed
aaff5fe
fix(audit,schedule): close three defects found by CodeQL and Copilot on this PR
ginccc
committed
df9d02c
fix(schedule,docs): repair positional test assertions after the user_id column, plus two doc corrections
ginccc
committed
bbd8f13

Commits on Jul 29, 2026