feat: ship isolated GraphKit.Auth runtime - #3

Merged

adamgell merged 79 commits into

mainfrom

codex/r8-lazy-secretmanagement

Sep 6, 2026

Commits on Aug 30, 2026

Fix exact-token tenant proof and refresh
adamgell
committed
7ef409a
Wire production token single-flight
adamgell
committed
67ab1d1
build: bind releases to canonical test proof
adamgell
committed
65f06e4

Commits on Aug 31, 2026

fix: harden credential and module lifecycle
adamgell
committed
5f706b5
docs: freeze the GraphKit Auth R8 train
adamgell
committed
76feb01
feat: establish r8 prerelease identity
adamgell
committed
f432bd1
fix: harden r8 release proof authority
adamgell
committed
cc4d4bd
fix: canonicalize r8 dirty source entries
adamgell
committed
208736c
fix: harden r8 source inventory
adamgell
committed
c934739
fix: bind r8 identity to safe source handles
adamgell
committed
ebd44bf
fix: harden r8 source identity proof
adamgell
committed
2051a20
fix: close r8 release proof breaker gaps
adamgell
committed
59a79db
test: define the GraphKit Auth package boundary
adamgell
committed
0aba617
fix: bind r8 helper through physical root aliases
adamgell
committed
614f756
test: stage clean r8 repair proof point
adamgell
committed
3f404c2
test: harden the GraphKit Auth boundary
adamgell
committed
bc060f1
feat: define the GraphKit Auth ABI
adamgell
committed
5392dd7
fix: harden GraphKit Auth contract isolation
adamgell
committed
73d9bb1
fix: bound GraphKit Auth shutdown
adamgell
committed
c5bc803
fix: sanitize GraphKit Auth shutdown failures
adamgell
committed
69ec2a2
feat: add the isolated GraphKit Auth provider
adamgell
committed
cb0acd9
fix: harden GraphKit Auth provider boundaries
adamgell
committed
1e01420
fix: keep provider ownership markers collectible
adamgell
committed
a8b74d8

Commits on Sep 1, 2026

build: package the isolated GraphKit Auth runtime
adamgell
committed
a204d85
feat: use compiled token sources for built-in auth
adamgell
committed
d16ca57
test: prove GraphKit Auth parity and runspace isolation
adamgell
committed
863155a
feat: enforce Task 8 auth and proof boundaries
adamgell
committed
0fcc707
test: isolate packaged proof harness scopes
adamgell
committed
1937cbd
fix: preserve cancellation and incomplete response semantics
adamgell
committed
c1dbec6
test: add protected GraphKit Auth parity runner
adamgell
committed
beceb22

Commits on Sep 2, 2026

docs: close no-adopter R9 gates
adamgell
committed
27c1ff1
docs: record R8 deterministic-complete vs approval-gated split
adamgell
committed
501cf25

Commits on Sep 4, 2026

fix: restore lazy SecretManagement boundary
adamgell
committed
6aee19b
test: isolate token partition concurrency harness
adamgell
committed
0e3b1c3
fix: harden release gate integrity
adamgell
committed
bf71102
fix: scan compiled package privacy surface
adamgell
committed
d340dca
fix: scan authored auth source for privacy
adamgell
committed
604ac0b
test: synchronize portable suite floor
adamgell
committed
dbbc0ad
fix: address auth boundary review findings
adamgell
committed
22410ff
fix: close r8 review and portability gaps
adamgell
committed
f69e436

Commits on Sep 5, 2026

fix: resolve r8 cross-platform review findings
adamgell
committed
479989e
fix: close remaining r8 review findings
adamgell
committed
8a621f3
fix: close exact-head r8 review findings
adamgell
committed
27b02b4
fix: harden r8 cleanup and deadline bounds
adamgell
committed
dddd9cb
test: isolate build failure regression
adamgell
committed
09c1a2a
test: preserve the portable test floor
adamgell
committed
100f7b4
fix: close final r8 review edge cases
adamgell
committed
e691127
fix: preserve optional release and factory contracts
adamgell
committed
a06dab8
test: harden final review harnesses
adamgell
committed
d8fbe42
test: bound lifecycle drain beyond scheduling window
adamgell
committed
cc9fe4a
fix: preserve auth parity fixture bytes on Windows
adamgell
committed
b446a2c
test: ratchet GraphKit suite floor
adamgell
committed
b1a36b7
fix: close final review findings
adamgell
committed
b915509
test: resolve final review gaps
adamgell
committed
c5a7a7a
fix: synchronize parity capture helper
adamgell
committed
0adb2ed
test: isolate lifecycle workers from thread job throttle
adamgell
committed
e6ec53a
docs: clarify verified tenant result contract
adamgell
committed
9dedd01
fix: resolve final R8 review findings
adamgell
committed
6e8f8a8
test: harden async cleanup seams
adamgell
committed
5a5bb40
test: isolate parity fan-out workers
adamgell
committed
5825ff9
fix: atomically secure Windows stage files
adamgell
committed
f91f4f2
fix: reject RFC-shaped placeholder identifiers
adamgell
committed
7e7af10
fix: close final R8 cleanup review gaps
adamgell
committed
2279348
fix: preserve shared build authority roots
adamgell
committed
a86db13
fix: preserve partial create-new destinations safely
adamgell
committed
4574f6e
fix: preserve Windows GraphKit.Auth ACL transitions
adamgell
committed
0865876
test: make R8 gates portable on Windows
adamgell
committed
1b4e9a7
fix: harden Windows auth stage portability
adamgell
committed
377c823
fix: bind staging evidence to native ownership
adamgell
committed
2f4c6e2
feat: isolate GraphKit Auth parity verification
adamgell
committed
4207364
test: await Task 8 fixture termination
adamgell
committed
e554a6e
test: tolerate loaded source proof startup
adamgell
committed
4d345f3
fix: allow bounded worker teardown proof
adamgell
committed
b709f23
test: separate runspace startup bounds
adamgell
committed
36bc95d
test: harden Windows hostile-link fixtures
adamgell
committed
ed7f989
test: finish Windows fixture cleanup
adamgell
committed
3914579
test: harden sealed fixture teardown
adamgell
committed
6262e5e
test: preserve Windows fixture parent ACL
adamgell
committed
cdc0101
test: isolate Windows alias cleanup ACLs
adamgell
committed
5ce9bdc