fix: preserve capability preflight across interleaved read-only whoami (Closes #469) #474

Closed

jcwalker3 wants to merge 2 commits from fix/issue-469-preflight-read-survival into master

Author	SHA1	Message	Date
sysadminandClaude Opus 4.8	0a6a70b3be	test: reset preflight globals in read-survival setUp (#469 ) Prevents cross-test leakage that masked the missing-capability fail-closed case. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-07-07 17:49:06 -04:00
sysadminandClaude Opus 4.8	764db897d4	fix: preserve capability preflight across interleaved read-only whoami (#469 ) Read-only gitea_whoami calls no longer clear a valid capability proof when whoami was already verified clean. Capability is consumed on mutation (one resolve per mutation), and verify_preflight_purity rejects task mismatches. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-07-07 17:47:30 -04:00

Author

SHA1

Message

Date

sysadminandClaude Opus 4.8

0a6a70b3be

test: reset preflight globals in read-survival setUp (#469 )

Prevents cross-test leakage that masked the missing-capability fail-closed case.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-07-07 17:49:06 -04:00

sysadminandClaude Opus 4.8

764db897d4

fix: preserve capability preflight across interleaved read-only whoami (#469 )

Read-only gitea_whoami calls no longer clear a valid capability proof when
whoami was already verified clean. Capability is consumed on mutation (one
resolve per mutation), and verify_preflight_purity rejects task mismatches.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-07-07 17:47:30 -04:00