fix(service-storage): a member attaches a file from the browser again — the upload's own completion attaches it as them, after #31031 by objectstack-fleet[bot] · Pull Request #31072 · objectstack-ai/objectstack

wip: a service verb vouches for the one file reference it created

claude

committed

4464fd0

test(service-storage): a member attaches through attachFileAs while sys_file stays unreadable

claude

committed

59d7107

test(dogfood): a member who may attach files archives a print as their own write

claude

committed

98c5826

chore(changeset): the attach verb vouches for the one file it created

claude

committed

78b1698

test(objectql, service-storage): type the engine options the new pins pass

claude

committed

4e9e098

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r16

claude

committed

b018a55

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r17

claude

committed

b3e5ab4

wip: the upload-complete door declares an attachTo target

claude

committed

b905481

wip: attachUploadAs commits a member's own pending upload and attaches it as them

claude

committed

2d0bb75

wip: the upload-complete door attaches the caller's own upload when the request names attachTo

claude

committed

53eef2e

wip: the vouch is spent on the verb's own write, and attachUploadAs vouches only for an unheld upload

claude

committed

4f78f54

wip: a census gate pins the call sites that set the vouched-reference mark

claude

committed

e0b4c21

wip: Test Core runs the vouched-reference census gate, red and green

claude

committed

27c3561

test(service-storage): attachUploadAs attaches a member's own pending upload, and refuses every other file

claude

committed

64beb52

Navigation Menu

Repository navigation

fix(service-storage): a member attaches a file from the browser again — the upload's own completion attaches it as them, after #31031 - #31072

fix(service-storage): a member attaches a file from the browser again — the upload's own completion attaches it as them, after #31031#31072
objectstack-fleet[bot] wants to merge 24 commits into
mainfrom
claude/sec-hardening-r17

Commits on Nov 6, 2026

wip: a service verb vouches for the one file reference it created

test(service-storage): a member attaches through attachFileAs while sys_file stays unreadable

test(dogfood): a member who may attach files archives a print as their own write

chore(changeset): the attach verb vouches for the one file it created

test(objectql, service-storage): type the engine options the new pins pass

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r16

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r17

wip: the upload-complete door declares an attachTo target

wip: attachUploadAs commits a member's own pending upload and attaches it as them

wip: the upload-complete door attaches the caller's own upload when the request names attachTo

wip: the vouch is spent on the verb's own write, and attachUploadAs vouches only for an unheld upload

wip: a census gate pins the call sites that set the vouched-reference mark

wip: Test Core runs the vouched-reference census gate, red and green

test(service-storage): attachUploadAs attaches a member's own pending upload, and refuses every other file

Commits on Nov 7, 2026

test(service-storage): the commit door hands attachTo to the attacher only after its own gates

fix(console): the attachments panel attaches through the upload's own completion

docs: the attachments panel attaches in the call that completes its upload

test(dogfood): a member with no sys_file read attaches through the panel's flow on the showcase boot

chore(changeset): the upload's own completion attaches a member's file from the browser

ci: the vouched-reference census runs beside the single authz resolver guard; the tenant audit census counts the attach verb's insert

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r17

chore: the vouched-reference census gate leaves this change for its own

chore(changeset): the upload-complete request gains attachTo, so the protocol line is added and spec takes minor

test(console): the write census drops the attachments panel's create — the upload's own completion attaches it