Authorize and audit permanent comment deletion #780

Merged
timmy merged 1 commits from timmy/779-authorize-audit-comment-deletion into main 2026-08-13 22:58:02 +00:00
Owner

Closes #779

What changed

  • Requires passkey-first/token-fallback fresh authorization bound to the exact comment before permanent deletion on issue, pull, and Updates conversations.
  • Journals privacy-safe comment_deleted events with reserve/discard/finalize outcome semantics.
  • Labels deletion in Security activity and documents it as a high-impact action.

TDD proof

  • RED: 5 expected failures before implementation (all deletes returned 200; delete_comment grants were rejected).
  • GREEN focused: 141 passed.
  • Full suite: 1483 passed in 74.38s.
Closes #779 ## What changed - Requires passkey-first/token-fallback fresh authorization bound to the exact comment before permanent deletion on issue, pull, and Updates conversations. - Journals privacy-safe `comment_deleted` events with reserve/discard/finalize outcome semantics. - Labels deletion in Security activity and documents it as a high-impact action. ## TDD proof - RED: 5 expected failures before implementation (all deletes returned 200; `delete_comment` grants were rejected). - GREEN focused: 141 passed. - Full suite: 1483 passed in 74.38s.
timmy added 1 commit 2026-08-13 22:56:03 +00:00
feat: authorize and audit comment deletion (Closes #779)
All checks were successful
CI / lint (pull_request) Successful in 1m28s
CI / build-release (pull_request) Successful in 5s
CI / release-candidate (pull_request) Has been skipped
3896f17a58
timmy merged commit 741c27eacf into main 2026-08-13 22:58:02 +00:00
Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#780
No description provided.