Code Factory v0.19.0 — Supervised Hosted Tenant Control
Code Factory 0.19.0 adds a supervised hosted tenant lifecycle on top of authenticated pull-request assurance.
Highlights:
- Bootstrap-only tenant creation with per-tenant OIDC/JWKS configuration
- Atomic directory-group role mapping and runtime-only env secret references
- 600-second one-time GitHub installation state and immutable installation binding
- Forced PostgreSQL RLS and serialized hash-linked administrative audit
- Redacted responsive operator console with in-memory-only Bearer use
- PostgreSQL 17 integration proof, 244 local tests, multi-OS Python CI, and full JetBrains compatibility matrix
Evidence boundary: this is a deployable supervised reference, not a claim of SCIM/SAML enrollment, managed HA/DR, external KMS, SOC 2, or an SLA. See CHANGELOG.md and docs/HOSTED_CONTROL_PLANE.md for the complete contract.