feat(auth): deny by default on the per-channel scope axis, and page GET /uploads (BACKLOG #1152) - #832

Open

wshallwshall wants to merge 8 commits into

mainfrom

worktree-agent-a400fedbec6f2c490

Commits on Sep 3, 2026

feat(auth): deny by default on the per-channel scope axis (BACKLOG #1152)

wshallwshall
and
claude
committed
37bdd9d
test(auth): grant the estate where a fixture meant a provisioned operator (BACKLOG #1152)

wshallwshall
and
claude
committed
917e276
docs(backlog): record the principal-narrowing limb of #1152 as built, item still open

wshallwshall
and
claude
committed
f4f9f2b
feat(api): page GET /uploads across the API and the console (BACKLOG #1152)

wshallwshall
and
claude
committed
3f7e2d9
docs(backlog): record the pagination limb of #1152 as built

wshallwshall
and
claude
committed
7968eab
docs(backlog): do not claim an exit criterion this checkout cannot read (BACKLOG #1152)

wshallwshall
and
claude
committed
00fb89a
fix(ui): page-walk the confirm-page lookup, and resolve the scope column (BACKLOG #1152)

wshallwshall
and
claude
committed
1367501

Commits on Sep 4, 2026

Merge origin/main, regenerating the engine seam rather than picking a side

wshallwshall
and
claude
committed
b7274fc