Repository navigation
security(agent): bind inference to durable admission - #41
Merged
Merged
Conversation
darwin67
force-pushed
the
rfd-5-phase-3-admission-hardening
branch
from
September 13, 2026 00:01
14b8640 to
151feb2
Compare
darwin67
force-pushed
the
rfd-5-phase-3-route-snapshots
branch
from
September 13, 2026 00:01
88a2bf7 to
2a2d14a
Compare
This was referenced Sep 13, 2026
darwin67
added a commit
that referenced
this pull request
Sep 13, 2026
## Summary - claim, poll, and complete ChatGPT device authorization through durable generation-fenced transitions - add ChatGPT subscription accounts and the device authorization UI - lease and coordinate OAuth refresh, normalize rotated credentials, and refresh just in time for inference - validate subscription access and provide actionable reconnect guidance - simplify authorization boundaries so this provider-integration layer is independently lint-clean ## Stack 1. **This PR** — ChatGPT device authorization and OAuth refresh 2. #40 — immutable execution-route snapshots 3. #41 — invocation admission hardening 4. #42 — final concurrency and UX hardening ## Verification - covered by the Phase 3 stack's passing `DATABASE_PORT=5432 mix precommit` run --------- Co-authored-by: Darwin Wu <tough.pasta0068@wunli88.com>
darwin67
force-pushed
the
rfd-5-phase-3-route-snapshots
branch
from
September 13, 2026 06:22
2a2d14a to
925c393
Compare
darwin67
force-pushed
the
rfd-5-phase-3-admission-hardening
branch
from
September 13, 2026 06:22
151feb2 to
424c551
Compare
darwin67
added a commit
that referenced
this pull request
Sep 13, 2026
## Summary - snapshot the selected provider, model, integration, and credential generation per turn - persist capability contracts and enforce the durable route during execution - gate route changes through compatibility checks and queue approved transitions - reject unapproved route records and normalize replay across accepted routes ## Stack - Depends on #38 - Followed by #41 invocation admission hardening and #42 final concurrency/UX hardening ## Verification - covered by the Phase 3 stack's passing `DATABASE_PORT=5432 mix precommit` run --------- Co-authored-by: Darwin Wu <tough.pasta0068@wunli88.com>
added 14 commits
September 13, 2026 07:22
darwin67
force-pushed
the
rfd-5-phase-3-admission-hardening
branch
from
September 13, 2026 07:22
424c551 to
5b94664
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Stack
Verification
DATABASE_PORT=5432 mix precommitrun