Skip to content

fix: bind private server state to one authenticated actor - #28

Merged
EvanProgramming merged 1 commit into
mainfrom
codex/issue-27-private-identity
Sep 3, 2026
Merged

fix: bind private server state to one authenticated actor#28
EvanProgramming merged 1 commit into
mainfrom
codex/issue-27-private-identity

Conversation

@EvanProgramming

Copy link
Copy Markdown
Owner

Fixes #27

What changed

  • bind Web/MCP private state to one stable deployment actor
  • reject client-supplied private speakers and scope durable reads by user
  • document the explicit single-user deployment model

Validation

  • make test
  • make check
  • make lint
  • real TestClient + temporary SQLite private-claim/session smoke test

No secrets or runtime data included.

@EvanProgramming
EvanProgramming merged commit a07a48e into main Sep 3, 2026
2 checks passed
@EvanProgramming
EvanProgramming deleted the codex/issue-27-private-identity branch September 3, 2026 10:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

security: bind private memory claims to a real authenticated identity

1 participant