fix: bind the node package to its actual OAuth subject #387

Merged
binjovi-bot merged 1 commit from fix/native-node-oauth-subject into trunk 2026-09-06 21:45:22 +00:00
Owner

Use independently observed OAuth token subject binjovi-node-agent, without the release actor service prefix. Recompute the immutable bundle ID in the server policy and fixed helper environment. Retain existing wrong-subject approval as history; no state injection or guard bypass. No maintenance operations exist. Red-green package contract passes.

Use independently observed OAuth token subject binjovi-node-agent, without the release actor service prefix. Recompute the immutable bundle ID in the server policy and fixed helper environment. Retain existing wrong-subject approval as history; no state injection or guard bypass. No maintenance operations exist. Red-green package contract passes.
fix: bind node approval to the actual OAuth subject
All checks were successful
binjovi/ci Binjovi completed the frozen plan
a8d60febef
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/seanfarm!387
No description provided.