Repository navigation
Extract admitted-error finalization from demo RC - #464
Draft
ChristianPavilonis wants to merge 11 commits into
Draft
ChristianPavilonis wants to merge 11 commits into
ChristianPavilonis wants to merge 11 commits into
Conversation
7 tasks done
aram356
added a commit
to IABTechLab/trusted-server
that referenced
this pull request
Nov 12, 2026
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Extract the existing demo's admitted-error finalization change into its own review unit above #439. This mechanically replays
89c279b59b75eb33b96eb30a35f78bf933762f34; it does not redesign response ownership or Geo policy.Base: #439,
feature/pluggable-geo-providersat22741b615d9369772830e64da92893207ac37b27.Head:
96c21d731501370044f11ca5832e85701e79a421. Refs #461; integration checkpoint #462.Retained changes
Two paths preserve route/grant/egress/failure/synthesized-response bookkeeping and the already selected private Geo outcome when rendering an admitted error through the current pre-dispatch boundary. The three existing regressions and guide explanation travel together. No separate body carrier, transport, timer policy or production Geo provider is added.
Checks and limits
The entire Core source tree is byte-identical to the tested extraction. Reusable proof: Core 1,174 default-parallel tests; Axum 488 and production-hosting 36 serial cases; scoped Clippy and formatting. Those receipts retain their exact original revisions and execution modes. No current full-workspace or hosted runtime pass is inferred from them.
Separate native parallel timing failures remain unclassified. This change does not relax their assertions or claim to resolve them. Local/source proof does not qualify ALB credential validation, cloud ingress, browser behavior or deployment.
Keep draft. The combined extraction and its current checks belong to #462, not a constituent merge into main.