Repository navigation

Improve runtime integration, bounded transactions and audit evidence - #27

Merged

ancongui merged 46 commits into

mainfrom

codex/checkpoint-framework-source-20261023T202816Z

Oct 30, 2026

Merged

Improve runtime integration, bounded transactions and audit evidence#27
ancongui merged 46 commits into
mainfrom
codex/checkpoint-framework-source-20261023T202816Z

Commits on Oct 23, 2026
- Preserve framework corrections and durable JDBC batch candidate
  Andres Contreras
  committed
  1ab9e5a
- Index durable batch under business coordination
  Andres Contreras
  committed
  45533ab
- Verify asynchronous callbacks by thread identity across scheduler modes
  Andres Contreras
  committed
  0a772ad
- Validate initialized Batch executors before admitting durable work
  Andres Contreras
  committed
  48fcca1
- Require header bearer authority and retain native CSRF protection
  Andres Contreras
  committed
  f0d75c7
- Quote Batch fixture role data without leaking credentials
  Andres Contreras
  committed
  72544b9
- Avoid eager bean initialization during application metadata discovery
  Andres Contreras
  committed
  8d6a6e1
- Protect client security diagnostics and checked buffer allocation
  Andres Contreras
  committed
  a8e99ce
Commits on Oct 24, 2026
- Preserve long precision in condition report counters
  Andres Contreras
  committed
  978a53b
- Preserve enum criteria types for configured R2DBC converters
  Andres Contreras
  committed
  95601cc
- Use cryptographic randomness for generated account numbers
  Andres Contreras
  committed
  f909721
- Project configured validated JWT tenants into authenticated principals
  Andres Contreras
  committed
  b079ed1
- Provide opt-in UTC auditing for mixed modern temporal models
  Andres Contreras
  committed
  134f4fb
- Keep database driver details out of generic error responses
  Andres Contreras
  committed
  ef2a5e6
- Preserve generated AES key material across configuration and rotation
  Andres Contreras
  committed
  5296bca
Commits on Oct 25, 2026
- Require literal boolean grants from OPA and OpenFGA
  Andres Contreras
  committed
  119b74f
- Preserve typed SDK variants through opt-in generation
  Andres Contreras
  committed
  2bea932
- Preserve Instant semantics through opt-in OpenAPI scalar generation
  Andres Contreras
  committed
  490cbce
- Restore production OAuth2 client registration on Boot 4
  Andres Contreras
  committed
  3ee0168
- Protect temporary outputs and remove empty credential defaults
  Andres Contreras
  committed
  f6e3cc2
- Escape provider log fields without exposing error payloads
  Andres Contreras
  committed
  bbefea0
- Keep data-processing logs free of untrusted payloads
  Andres Contreras
  committed
  78d185b
Commits on Oct 26, 2026
- Keep R2DBC filter diagnostics free of request payloads
  Andres Contreras
  committed
  13219db
- Keep cache diagnostics free of keys and provider payloads
  Andres Contreras
  committed
  6f035c4
- Escape webhook metric diagnostics without changing telemetry
  Andres Contreras
  committed
  71d4d84
- Keep orchestration diagnostics on one log line
  Andres Contreras
  committed
  6f1e1f7
- Escape line separators in orchestration EDA diagnostics
  Andres Contreras
  committed
  313c35d
- Escape line separators in webhook processing diagnostics
  Andres Contreras
  committed
  49a28d8
- Escape provider fields in webhook controller diagnostics
  Andres Contreras
  committed
  abc1d9c
Commits on Oct 27, 2026
- Add opt-in bounded R2DBC root transactions with owned cleanup
  Andres Contreras
  committed
  4ec8801
- Expose budget intersections for pre-acquisition owner bounds
  Andres Contreras
  committed
  5da837f
- Escape webhook guard diagnostic fields without changing request behavior
  Andres Contreras
  committed
  5cd8ec4
- Escape job and enrichment diagnostic fields without changing payloads
  Andres Contreras
  committed
  a387cdb
- Escape String diagnostics in global data controllers
  Andres Contreras
  committed
  e4a13ca
- Escape remaining starter-data diagnostic fields
  Andres Contreras
  committed
  7665c0a
- Escape orchestration diagnostic fields without changing workflow behavior
  Andres Contreras
  committed
  a1bb5bd
- Bound persistence diagnostic fields without changing stored workflow state
  Andres Contreras
  committed
  dbaf8f4
- Preserve indexed auto-configuration exclusions during observability setup
  Andres Contreras
  committed
  24f9abf
- Honor the orchestration REST switch for workflow management
  Andres Contreras
  committed
  494db72
- Project the authenticated issuer into OPA policy subjects
  Andres Contreras
  committed
  a2469ed
Commits on Oct 28, 2026
- Add bounded audit evidence with exact principal tenant keys
  Andres Contreras
  committed
  3503f25
- Append immutable audit evidence in the owning R2DBC transaction
  Andres Contreras
  committed
  85f5f95
Commits on Oct 29, 2026
- Accept monthly patch counters beyond two digits
  Andres Contreras
  committed
  b5934a9
- Bind Batch publication plans to explicit namespace intent
  Andres Contreras
  committed
  eaa499b
- Retain versioned policy decisions and refuse unsupported obligations
  Andres Contreras
  committed
  c0f22a7
Commits on Oct 30, 2026
- Preserve exact opaque tenant claims and reject malformed candidates
  Andres Contreras
  committed
  dd54b16

Commits

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 25, 2026

Commits on Oct 26, 2026

Commits on Oct 27, 2026

Commits on Oct 28, 2026

Commits on Oct 29, 2026

Commits on Oct 30, 2026