 fszontagh
|
6243bcda63
merge: v2.7.0 row- and column-level security
|
1 mese fa |
|
fszontagh
|
7a6fac7da7
release(v2.7.0): row- and column-level security, off by default
|
1 mese fa |
|
fszontagh
|
93e31ca532
fix(security): per-call principal identity; project-scope subscribe; surface denials
|
1 mese fa |
|
fszontagh
|
14e3e7d31e
feat(security): enforcement wired into every data handler; blocked on per-call identity
|
1 mese fa |
|
fszontagh
|
1dff5cc157
feat(security): principal identity + access policy engine (enforcement WIP)
|
1 mese fa |
|
fszontagh
|
10241924fb
release(v2.6.0): project-scoped file storage
|
1 mese fa |
|
fszontagh
|
a7116fedd2
docs(spec): RLS/CLS design + project-scoped files plan
|
1 mese fa |
|
fszontagh
|
49316a7cff
docs: correct the claim that view filters are a security boundary
|
1 mese fa |
|
fszontagh
|
44bb2baafe
docs: v2.4.5 collection namespacing + versioning switch; fix stale ms default
|
1 mese fa |
|
fszontagh
|
e7221e46a7
release(v2.4.5): namespace collection management; per-collection versioning switch
|
1 mese fa |
|
fszontagh
|
fa99931de5
docs(plan): pre-flight fixes before execution
|
1 mese fa |
|
fszontagh
|
ee2291e300
docs(plan): relations v2.5.0 implementation plan
|
1 mese fa |
|
fszontagh
|
8cd73fb705
docs: record the LMDB per-process POSIX lock hazard and the count surfaces
|
1 mese fa |
|
fszontagh
|
635a617806
fix(audit): never open a second MDB_env in-process; count via LMDB everywhere
|
1 mese fa |
|
fszontagh
|
ddf0a7f3d2
fix(count): serve Count from LMDB like every other read
|
1 mese fa |
|
fszontagh
|
e73f2603ab
docs(spec): relations design for v2.5.0
|
1 mese fa |
|
fszontagh
|
55f9209b79
release(v2.4.4): sub-db identity sentinel + placement audit/repair
|
1 mese fa |
|
fszontagh
|
236060d4e3
release(v2.4.3): LMDB handle lifetime + eviction drain cap + live assertions
|
1 mese fa |
|
fszontagh
|
6132c2535a
release(v2.4.2): project-scoped views; views were unreachable since v2.3
|
1 mese fa |
|
fszontagh
|
cc0fe52080
release(v2.4.1): --version reports the real version
|
1 mese fa |
|
fszontagh
|
ee59b96431
release(v2.4.0): per-listener TLS + bearer-token auth
|
3 mesi fa |
|
fszontagh
|
96d21d63a3
v2.4 Stage E: Client TLS + auth_token
|
3 mesi fa |
|
fszontagh
|
c68171ed53
v2.4 Stage F: CLI helpers — generate-auth-key + generate-tls-cert
|
3 mesi fa |
|
fszontagh
|
98c213aa69
v2.4 Stage D: API-key auth metadata processor
|
3 mesi fa |
|
fszontagh
|
9d6ad72f91
v2.4 Stage C: TLS listener + self-signed cert generation
|
3 mesi fa |
|
fszontagh
|
1dd30be0aa
v2.4 Stage B: multi-listener gRPC server startup
|
3 mesi fa |
|
fszontagh
|
b944f5e929
v2.4 Stage A: per-listener config schema + back-compat shim
|
3 mesi fa |
|
fszontagh
|
da7a43613f
fix(storage): dropCollection must purge the vector sub-db (no leak)
|
3 mesi fa |
|
fszontagh
|
e617efa774
fix(storage): don't recreate legacy env/ on a v2.3 instance (restart-fatal)
|
3 mesi fa |
|
fszontagh
|
d5f72d3405
test: multi-project stress + replication load tests
|
4 mesi fa |
