fix: harden RBAC permission boundaries - #6

Merged

toto04 merged 15 commits into

toto04/rbacfrom

codex/rbac-audit-fixes

Sep 18, 2026

Commits on Sep 16, 2026

fix: harden RBAC permission boundaries
lorenzocorallo
authored
d3e466d

Commits on Sep 17, 2026

fix: deny wildcard bootstrap without explicit admin configuration
viganogabriele
committed
36505b0
fix: reject legacy inherited Master Admin wildcards during resolution
viganogabriele
committed
8e7c7b6
fix: resolve fresh tenant-bound evidence and atomic RBAC snapshots
viganogabriele
committed
6f5bc6b
fix: serialize and reauthorize RBAC mutations with append-only audit history
viganogabriele
committed
1899b8d
fix: prevent writers from delegating or editing authority above their own
viganogabriele
committed
c4b13d6
fix: serialize evidence changes to prevent verification replay and lost attempt counts
viganogabriele
committed
eeb1394
fix: enforce repository read boundaries and stop write-only member disclosure
viganogabriele
committed
a3d14a4
fix: validate security settings before startup in production containers
viganogabriele
committed
ef96aa3
fix: deny unconfigured resource-policy administration and cover plugin boundaries
viganogabriele
committed
77c7174
docs: record RBAC threat model findings and deployment requirements
viganogabriele
committed
87280c2
fix: preserve verification resend limits after code consumption
lorenzocorallo
committed
1291fc4
fix: keep RBAC authorization current without blocking on Graph
lorenzocorallo
committed
defba77
docs: explain RBAC rollout and final security review
lorenzocorallo
committed
2812c32
fix: reset member pagination when changing roles
lorenzocorallo
committed
2d84c28