fix: bind the node package to its actual OAuth subject #387
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/native-node-oauth-subject"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Use independently observed OAuth token subject binjovi-node-agent, without the release actor service prefix. Recompute the immutable bundle ID in the server policy and fixed helper environment. Retain existing wrong-subject approval as history; no state injection or guard bypass. No maintenance operations exist. Red-green package contract passes.