fix(permissions): keep board-access reads behind confirmed writes - #3330

Merged

Chris0Jeky merged 17 commits into

mainfrom

audit/3328-permission-read-ownership

Sep 22, 2026

Commits on Sep 22, 2026

test(permissions): reproduce read and session races
Chris0Jeky
committed
f963ae5
fix(permissions): bind access state to reads and sessions
Chris0Jeky
committed
457c259
fix(permissions): deduplicate grant settlement by stable id
Chris0Jeky
committed
72c1de9
test(permissions): pin grant settlement deduplication
Chris0Jeky
committed
ed3ffbc
test(permissions): invalidate operations on token rotation
Chris0Jeky
committed
421122b
fix(permissions): invalidate ownership on token rotation
Chris0Jeky
committed
fa4ee41
test(permissions): preserve access cache across token refresh
Chris0Jeky
committed
3b275ee
fix(permissions): preserve access cache across token refresh
Chris0Jeky
committed
e00f5d6
docs(permissions): preserve access cache on token refresh
Chris0Jeky
committed
5a86d81
test(permissions): retry unresolved access read after token refresh
Chris0Jeky
committed
2676cce
fix(permissions): retry unresolved reads after token refresh
Chris0Jeky
committed
1bfe9b7
docs(permissions): record unresolved-read retry contract
Chris0Jeky
committed
eb70563
fix(permissions): reconcile stale mutations after refresh
Chris0Jeky
committed
dc66fd7
fix(permissions): reconcile stale mutations after active reads
Chris0Jeky
committed
00a9bf0
fix(permissions): retry reconciliation after token rotation
Chris0Jeky
committed
a6fd963
fix: retry cached permissions after token refresh
Chris0Jeky
committed
0f9cad1
Separate token refresh from re-login ownership
Chris0Jeky
committed
112585b