Authorize and audit permanent comment deletion #780

2026-08-13T22:56:02Z

timmy commented

2026-08-13 22:56:02 +00:00

Closes #779

What changed

Requires passkey-first/token-fallback fresh authorization bound to the exact comment before permanent deletion on issue, pull, and Updates conversations.
Journals privacy-safe comment_deleted events with reserve/discard/finalize outcome semantics.
Labels deletion in Security activity and documents it as a high-impact action.

TDD proof

RED: 5 expected failures before implementation (all deletes returned 200; delete_comment grants were rejected).
GREEN focused: 141 passed.
Full suite: 1483 passed in 74.38s.

Closes #779 ## What changed - Requires passkey-first/token-fallback fresh authorization bound to the exact comment before permanent deletion on issue, pull, and Updates conversations. - Journals privacy-safe `comment_deleted` events with reserve/discard/finalize outcome semantics. - Labels deletion in Security activity and documents it as a high-impact action. ## TDD proof - RED: 5 expected failures before implementation (all deletes returned 200; `delete_comment` grants were rejected). - GREEN focused: 141 passed. - Full suite: 1483 passed in 74.38s.

timmy added 1 commit 2026-08-13 22:56:03 +00:00

feat: authorize and audit comment deletion (Closes #779 )

CI / lint (pull_request) Successful in 1m28s

Details

CI / build-release (pull_request) Successful in 5s

Details

CI / release-candidate (pull_request) Has been skipped

Details

3896f17a58

timmy merged commit 741c27eacf into main

2026-08-13 22:58:02 +00:00

timmy referenced this issue from a commit

2026-08-13 22:58:03 +00:00

Merge pull request 'Authorize and audit permanent comment deletion' (#780) from timmy/779-authorize-audit-comment-deletion into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#780