Skip to content

Enforce the provider publication policy consistently #293

Closed

Description

@devantler

🤖 Generated by the Agentic Engineer

Requirement

The provider must apply its documented publication policy consistently to every supported configuration form.

Direction

Strengthen policy validation while preserving read-only observation and the existing credential boundary. Detailed security evidence remains in private operator notes.

Acceptance criteria

  • Regression coverage exercises the supported configuration forms and rejects policy conflicts before publication.
  • Valid dedicated reader publications continue to work.
  • No credential values are read or exposed.

Rough size: M.

Activity

  1. self-assigned this
    on Oct 5, 2026
  2. added a commit that references this issue on Oct 5, 2026
  3. devantler commented on Oct 5, 2026

    @devantler
    ContributorAuthor

    🤖 Generated by the Agentic Engineer

    Completed in merged #294.

    The provider consistently applies the dedicated reader publication policy before admitting a product. Positive and negative metadata-only regressions and race checks pass. This evidence does not establish an external database's effective grants or live adoption.

    All required CI passed at the reviewed signed source head. The combined release also passed targeted race regressions and the complete real-browser suite. The accepted implementation is on protected main.

    Production rollout is tracked separately in devantler-tech/platform#4510; this closure does not assert that the new release is deployed or activate additional features.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Fields

No fields configured for Security.

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions