Fresh-authorize and audit Human Gate decisions #1422

Merged
timmy merged 1 commits from timmy/1421-require-fresh-authorization-audit-human-gate-decisions into main 2026-08-26 06:22:51 +00:00
Owner

Closes #1421

Product slice

  • require a gate-ID-bound one-time fresh-authorization grant before Release or Hold
  • reserve and finalize an encrypted Security Activity event for each new decision
  • fail closed when the journal cannot reserve and discard pending events on rejected decisions
  • keep private decision reasons out of the security journal

Validation

  • pytest -q tests/test_human_gate_api.py — 9 passed
  • pytest -q tests/test_dashboard_session_frontend.py tests/test_security_activity.py — 65 passed
  • pytest -q — 2717 passed, 24 skipped
Closes #1421 ## Product slice - require a gate-ID-bound one-time fresh-authorization grant before Release or Hold - reserve and finalize an encrypted Security Activity event for each new decision - fail closed when the journal cannot reserve and discard pending events on rejected decisions - keep private decision reasons out of the security journal ## Validation - `pytest -q tests/test_human_gate_api.py` — 9 passed - `pytest -q tests/test_dashboard_session_frontend.py tests/test_security_activity.py` — 65 passed - `pytest -q` — 2717 passed, 24 skipped
timmy added 1 commit 2026-08-26 06:11:43 +00:00
feat: fresh-authorize and audit Human Gate decisions
CI / lint (pull_request) Successful in 3m50s
CI / build-release (pull_request) Successful in 7s
CI / browser-journey (pull_request) Successful in 6m39s
CI / release-candidate (pull_request) Has been skipped
1c66905b4a
timmy merged commit 1e8d9a27be into main 2026-08-26 06:22:51 +00:00
Sign in to join this conversation.