feat(security): comprehensive security hardening across core, sdk, mcp, witness, pam, and verifier - #408

Merged

bordumb merged 17 commits into

mainfrom

dev-securityHardening

Jul 23, 2026

Commits on Jul 23, 2026

feat(cli): implement Kubernetes ExecCredential plugin authentication in auths-sdk workflow
auths-bot
committed
4b705c1
feat(cli): enforce SLSA provenance environment detection and release workflow integration
auths-bot
committed
d71690c
feat(mcp): enforce UsdcNetwork enum for parse-dont-validate payment mode downgrade protection
auths-bot
committed
f047847
refactor(mcp): thread-safe panic-free CapSec root initialization in McpCapsecGuard
auths-bot
committed
d8efb83
feat(daemon): implement InvalidPayloadEncoding error semantics and payload zeroization
auths-bot
committed
1a1ebd1
feat(pam): implement constant-time challenge verification, zeroization, and PamError
auths-bot
committed
53f616d
refactor(sdk): transition AgentGuard workflow to integer cents budgeting and checked arithmetic
auths-bot
committed
17d5950
feat(sdk): enforce historical point-in-time producer authority verification with KeriPublicKey and signed_at
auths-bot
committed
c9040df
feat(verifier): enforce typed KeriEvent struct and sequence jump checks in WASM entrypoint
auths-bot
committed
ae86db9
feat(witness): implement WitnessKeyProvider trait with KeriPublicKey and payload zeroization
auths-bot
committed
1e8d417
feat(witness): implement WitnessNotFoundResponse and fail-closed 404 header verification in witness client
auths-bot
committed
fa0bf4c
build(deps): update Cargo.lock for new crate dependencies
auths-bot
committed
c0d9810
fix(clippy): collapse nested if statements and fix unwrap / dead_code lints
auths-bot
committed
43a4b5a
fix(clippy): read code field in witness 404 verification and apply cargo fmt
auths-bot
committed
5521897
style: format workspace with cargo fmt
auths-bot
committed
f228f23
docs(daemon): update api-spec.yaml for invalid-payload-encoding error variant per ADR 004
auths-bot
committed
a45f3d2
ci(release): add SLSA L3 provenance generation and artifact upload steps
auths-bot
committed
7c8f015

Navigation Menu

Uh oh!

feat(security): comprehensive security hardening across core, sdk, mcp, witness, pam, and verifier - #408

feat(security): comprehensive security hardening across core, sdk, mcp, witness, pam, and verifier#408
bordumb merged 17 commits into
mainfrom
dev-securityHardening

Commits on Jul 23, 2026

feat(cli): implement Kubernetes ExecCredential plugin authentication in auths-sdk workflow

feat(cli): enforce SLSA provenance environment detection and release workflow integration

feat(mcp): enforce UsdcNetwork enum for parse-dont-validate payment mode downgrade protection

refactor(mcp): thread-safe panic-free CapSec root initialization in McpCapsecGuard

feat(daemon): implement InvalidPayloadEncoding error semantics and payload zeroization

feat(pam): implement constant-time challenge verification, zeroization, and PamError

refactor(sdk): transition AgentGuard workflow to integer cents budgeting and checked arithmetic

feat(sdk): enforce historical point-in-time producer authority verification with KeriPublicKey and signed_at

feat(verifier): enforce typed KeriEvent struct and sequence jump checks in WASM entrypoint

feat(witness): implement WitnessKeyProvider trait with KeriPublicKey and payload zeroization

feat(witness): implement WitnessNotFoundResponse and fail-closed 404 header verification in witness client

build(deps): update Cargo.lock for new crate dependencies

fix(clippy): collapse nested if statements and fix unwrap / dead_code lints

fix(clippy): read code field in witness 404 verification and apply cargo fmt

style: format workspace with cargo fmt

docs(daemon): update api-spec.yaml for invalid-payload-encoding error variant per ADR 004

ci(release): add SLSA L3 provenance generation and artifact upload steps