Canonical Identity Binding Cutover: Remove isTrusted#11006

Merged

noanflaherty merged 13 commits into

mainfrom

feature/canonical-id-binding-cutover

Mar 1, 2026

Commits on Mar 1, 2026

feat: add guardianPrincipalId to schema and storage plumbing (#10965)

noanflaherty
and
claude
authored
M2: Backfill + startup invariants for guardian principal (#10969)

noanflaherty
and
claude
authored
feat: propagate guardianPrincipalId through runtime contexts (#10978)

noanflaherty
and
claude
authored
M4: Bind principal at all canonical request creation sites (#10980)

noanflaherty
and
claude
authored
M5: Cutover decision authorization + remove isTrusted (#10990)

noanflaherty
and
claude
authored
feat: M6 — tests + guardrails + cleanup for principal-based auth (#10961) (#11002)

noanflaherty
and
claude
authored
fix: address holistic review — decidedByPrincipalId, access_request exempt, backfill expiry, code lookup guard

noanflaherty
and
claude
committed
fix: make isAuthorizedGuardianPrincipal symmetric for cross-channel approval

noanflaherty
and
claude
committed
fix: address reviewer feedback — binding check, pre-bootstrap IPC, migration access_request exclusion

noanflaherty
and
claude
committed
fix: unify channel binding principals + fix test fixtures for IntegrityError guard

noanflaherty
and
claude
committed
fix: align migration registry checkpoint key with migration function (_v1 -> _v2)
noanflaherty
committed
fix: narrow CanonicalDecisionResult union before accessing resolverReplyText
noanflaherty
committed
Merge remote-tracking branch 'origin/main' into swarm/canonical-id-bind/merge-main
noanflaherty
committed