ForbidCredentialCastBypassRule — hashed/encrypted cast columns may only be written through the model path (#217) - #68

Closed

Goosterhof wants to merge 3 commits into

mainfrom

feature/queue217-forbid-credential-cast-bypass

Commits on Aug 30, 2026

feat(queue-217): ForbidCredentialCastBypassRule — credential casts bypassed by builder writes
Goosterhof
committed
3c97841
fix(queue-217): trait-declared casts, chain-scoped DB::table, and fail-open on unreadable model source
Goosterhof
committed
d958a29

Commits on Aug 31, 2026

fix(queue-217): read composed cast maps, and report the two fail-open shapes crit found

Goosterhof
and
claude
committed
9cc3a11