ForbidCredentialCastBypassRule — cast resolution is PHP dispatch, not an ancestry merge (#217, supersedes #68) - #69

Merged

Goosterhof merged 4 commits into

mainfrom

feature/queue217-credential-cast-dispatch-resolution

Sep 1, 2026

Commits on Sep 1, 2026

feat(queue-217): ForbidCredentialCastBypassRule — credential-cast columns may only be written through the model path

Goosterhof
and
claude
committed
6fadd44
fix(queue-217): drop the trait-$casts shape from the loaded table — fatal on PHP 8.4

Goosterhof
and
claude
committed
69f503d
fix(queue-217): resolve casts() dispatch by reflection; cover the verbs and receivers that bypass casts

Goosterhof
and
claude
committed
3de488c
fix(queue-217): version-gate the payload-slot signature check across both supported Laravel majors

Goosterhof
and
claude
committed
1de5289