Commits

Commit history

1. Commits on Oct 5, 2026

   • Fix the high-severity comment/test findings from the 2026-10-01 review (K4-01, K2-01, K3-01, K11-01, K14-01, K14-02) (#511)

     Show description for c9e0839
     

     devresponse

     and

     claude

     authored
     c9e0839View commit details

     Copy full SHA for c9e0839

     View code at this pointBrowse repository at this point
2. Commits on Oct 1, 2026

   • feat(drk-deploy): db:runtime-login moves production onto a least-privilege login in one command, checked against the gate's target line, and retires old logins (DEP4)

     Show description for 951da1f
     

     devresponse

     and

     claude

     committed
     951da1fView commit details

     Copy full SHA for 951da1f

     View code at this pointBrowse repository at this point

   • feat(db): least-privilege runtime role: privilege manifest reconciled on every migrate, pnpm db:runtime-login, the gate's privilege check and ratchet, CI runs the app as a non-owner login (DEP3)

     Show description for fdca6c7
     

     devresponse

     and

     claude

     committed
     fdca6c7View commit details

     Copy full SHA for fdca6c7

     View code at this pointBrowse repository at this point

   • feat(deploy): migrate production on every push to main, refuse unsafe migration sessions, retire deploy.yml (DEP2)

     Show description for a0644f3
     

     devresponse

     and

     claude

     committed
     a0644f3View commit details

     Copy full SHA for a0644f3

     View code at this pointBrowse repository at this point

   • feat(deploy): fail-closed schema gate in the Vercel production build, plus the expand/contract rule and its guard (DEP1)

     Show description for 7d77f9d
     

     devresponse

     and

     claude

     committed
     7d77f9dView commit details

     Copy full SHA for 7d77f9d

     View code at this pointBrowse repository at this point

   • refactor(db): consolidate core migrations 0002-0008 into 0002-release.sql, keep pre-consolidation databases working (MIG)

     Show description for 66754df
     

     devresponse

     and

     claude

     committed
     66754dfView commit details

     Copy full SHA for 66754df

     View code at this pointBrowse repository at this point
3. Commits on Sep 30, 2026

   • refactor(http): move the route wrappers, request id, error envelopes, origin guard and rate limiters into src/lib/http (R13, I-13)

     Show description for ee804cd
     

     devresponse

     and

     claude

     committed
     ee804cdView commit details

     Copy full SHA for ee804cd

     View code at this pointBrowse repository at this point

   • feat(privacy): per-user data export and SECURITY DEFINER erasure with migration 0008 (F-151)

     Show description for d4f7a27
     

     devresponse

     and

     claude

     committed
     d4f7a27View commit details

     Copy full SHA for d4f7a27

     View code at this pointBrowse repository at this point

   • docs: make topology, migration tags, handoff claims, SSO wording and UAT citations match the code (F-107, F-135, I-05, M-01, A-09, I-16)

     Show description for 495a82f
     

     devresponse

     and

     claude

     committed
     495a82fView commit details

     Copy full SHA for 495a82f

     View code at this pointBrowse repository at this point

   • refactor(db,admin): type timestamp columns as Date, route sibling code through loadScopedOrg, isUuid and status-values (F-131, F-133)

     Show description for 1759a34
     

     devresponse

     and

     claude

     committed
     1759a34View commit details

     Copy full SHA for 1759a34

     View code at this pointBrowse repository at this point

   • fix(db): lock role and permission deletes, make global role keys and the default flag unique, index the search ORs, store no provider tokens (F-97, F-93, M-02, F-150)

     Show description for 175f284
     

     devresponse

     and

     claude

     committed
     175f284View commit details

     Copy full SHA for 175f284

     View code at this pointBrowse repository at this point

   • fix(admin): recognise unique and foreign-key violations by SQLSTATE and constraint, not English message text (F-132)

     Show description for 1fe111e
     

     devresponse

     and

     claude

     committed
     1fe111eView commit details

     Copy full SHA for 1fe111e

     View code at this pointBrowse repository at this point

   • fix(migrations): run both migrators under lock_timeout and statement_timeout, correct 0005's "online" claim (F-94)

     Show description for 6dd9f92
     

     devresponse

     and

     claude

     committed
     6dd9f92View commit details

     Copy full SHA for 6dd9f92

     View code at this pointBrowse repository at this point

   • fix(lifecycle): restore hands memberships back for re-approval, a banned sign-in says so (F-152, F-153)

     Show description for addb71b
     

     devresponse

     and

     claude

     committed
     addb71bView commit details

     Copy full SHA for addb71b

     View code at this pointBrowse repository at this point

   • fix(admin): count only superadmins who can sign in toward the last-superadmin guard, gate bans (F-56)

     Show description for e6eb584
     

     devresponse

     and

     claude

     committed
     e6eb584View commit details

     Copy full SHA for e6eb584

     View code at this pointBrowse repository at this point
4. Commits on Sep 25, 2026

   • fix(db): test:db runs against DATABASE_TEST_URL and refuses a non-local host (F-44)

     Show description for 7a01084
     

     devresponse

     and

     claude

     committed
     7a01084View commit details

     Copy full SHA for 7a01084

     View code at this pointBrowse repository at this point

   • fix(orgs): the default organization is the one flagged is_default, not the slug "default" (F-40)

     Show description for 1b9fde3
     

     devresponse

     and

     claude

     committed
     1b9fde3View commit details

     Copy full SHA for 1b9fde3

     View code at this pointBrowse repository at this point

   • fix(i18n): apply the saved time zone, formats and language (F-37)

     Show description for b578fcd
     

     devresponse

     and

     claude

     committed
     b578fcdView commit details

     Copy full SHA for b578fcd

     View code at this pointBrowse repository at this point

   • fix(auth): resolve the session's org from an active membership first (F-33)

     Show description for 8c645dd
     

     devresponse

     and

     claude

     committed
     8c645ddView commit details

     Copy full SHA for 8c645dd

     View code at this pointBrowse repository at this point

   • fix(ops): readiness checks env + Better Auth schema; env parsed at boot (F-26)

     Show description for dd49256
     

     devresponse

     and

     claude

     committed
     dd49256View commit details

     Copy full SHA for dd49256

     View code at this pointBrowse repository at this point

   • docs(satellites): A/B containment is conditional; drk-deploy warns (F-24)

     Show description for 086ae9d
     

     devresponse

     and

     claude

     committed
     086ae9dView commit details

     Copy full SHA for 086ae9d

     View code at this pointBrowse repository at this point
5. Commits on Sep 7, 2026

   • fix(db,supply-chain,tooling): one connection per migration/seed/reset transaction, cooldown + hashed package manager, enforced mutation floors, intra-PR secret scan (review #84, #88, #226, #229, #2…

     Show description for 610d7a9
     

     devresponse

     and

     claude

     authored
     610d7a9View commit details

     Copy full SHA for 610d7a9

     View code at this pointBrowse repository at this point
6. Commits on Sep 6, 2026

   • docs(comments): retarget stale plan/design/spec citations and pin them with a resolving-citation test (review #130, #131, #147, #165, #172, #174, #175, #176, #177) (#417)

     Show description for 81610b2
     

     devresponse

     and

     claude

     authored
     81610b2View commit details

     Copy full SHA for 81610b2

     View code at this pointBrowse repository at this point

   • feat(rate-limit): Postgres-backed shared bucket for the pre-auth floors + DB-backed Better Auth limiter (review #98, #199) (#412) (#414)

     Show description for e44b702
     

     devresponse

     and

     claude

     authored
     e44b702View commit details

     Copy full SHA for e44b702

     View code at this pointBrowse repository at this point
7. Commits on Sep 5, 2026

   • feat(rate-limit): Postgres-backed shared bucket for the pre-auth floors + DB-backed Better Auth limiter (review #98, #199) (#412)

     Show description for 710f03c
     

     devresponse

     and

     claude

     authored
     710f03cView commit details

     Copy full SHA for 710f03c

     View code at this pointBrowse repository at this point

   • fix(db): integrity constraints migration 0005, ledger checksums + advisory lock, audit least-privilege role (review #15, #63, #83, #85, #86, #89, #217, #218) (#411)

     Show description for 8266715
     

     devresponse

     and

     claude

     authored
     8266715View commit details

     Copy full SHA for 8266715

     View code at this pointBrowse repository at this point

   • fix(api-auth): retire JWTs on credential revoke/rotate, cap TTL by key expiry, RFC 8707 MCP audience (review #43, #48, #50, #53) (#407)

     Show description for f0d5566
     

     devresponse

     and

     claude

     authored
     f0d5566View commit details

     Copy full SHA for f0d5566

     View code at this pointBrowse repository at this point

   • fix(lifecycle): stop crashing on Next-contained faults, hand SIGTERM to Next's drain, gate pool timeouts with search_path (review #23, #24, #20) (#404)

     Show description for cafdf3c
     

     devresponse

     and

     claude

     authored
     cafdf3cView commit details

     Copy full SHA for cafdf3c

     View code at this pointBrowse repository at this point

   • docs(comments): Wave 4 §6 accuracy sweep for src/lib, src/db, scripts and docs (review #30, #82, #93, #126–#129, #134, #139–#146, #148, #150–#153, #171, #198, #231) (#403)

     Show description for 44395f2
     

     devresponse

     and

     claude

     authored
     44395f2View commit details

     Copy full SHA for 44395f2

     View code at this pointBrowse repository at this point

   • fix(auth): resolve the sign-up verification waiver for the org the account lands in (review #2) (#399)

     Show description for bc3509a
     

     devresponse

     and

     claude

     authored
     bc3509aView commit details

     Copy full SHA for bc3509a

     View code at this pointBrowse repository at this point

   • fix(seed): refuse the dev fixture on any non-local database host (review #19) (#395)

     Show description for 08e973c
     

     devresponse

     and

     claude

     authored
     08e973cView commit details

     Copy full SHA for 08e973c

     View code at this pointBrowse repository at this point

   • fix(seed): provenance-gate the seed admin — never adopt or re-activate a foreign account (review #18) (#394)

     Show description for f86b7c5
     

     devresponse

     and

     claude

     authored
     f86b7c5View commit details

     Copy full SHA for f86b7c5

     View code at this pointBrowse repository at this point

   • fix(seed): relax the platform sign-up policy on first run only, never over an admin edit (review #17) (#393)

     Show description for 7b8abea
     

     devresponse

     and

     claude

     authored
     7b8abeaView commit details

     Copy full SHA for 7b8abea

     View code at this pointBrowse repository at this point
8. Commits on Sep 4, 2026

   • fix(email): redact one-time tokens from outbox rows and serve bodies per row (review #21, #221) (#386)

     Show description for 1f234f1
     

     devresponse

     and

     claude

     authored
     1f234f1View commit details

     Copy full SHA for 1f234f1

     View code at this pointBrowse repository at this point
9. Commits on Jul 13, 2026

   • fix(seed): gate the demo satellite apps out of production bootstraps (#358)

     Show description for e371541
     

     devresponse

     and

     claude

     authored
     e371541View commit details

     Copy full SHA for e371541

     View code at this pointBrowse repository at this point