feat(storage): bind and cancel managed dependency admission - #2622

Closed

zhiiw wants to merge 20 commits into

apache:mainfrom

zhiiw:codex/managed-admission-cancellation-authority

Commits on Aug 23, 2026

feat(runtime-host): constrain managed npm provisioning
zhiiw
committed
04c4c77
fix(runtime-host): defer npm admission to runtime attestation
zhiiw
committed
1a5af1e
fix(runtime-host): reap descendants after producer root exit
zhiiw
committed
2c37025
feat(runtime-host): attest bundled npm runtime
zhiiw
committed
2772169
test(runtime-host): verify real bundled npm installs
zhiiw
committed
2e2838e
fix(runtime-host): keep Windows npm home path bounded
zhiiw
committed
d525404
fix(release): canonicalize bundled npm verifier paths
zhiiw
committed
57f9fb9
style(runtime-host): format rebased producer boundary
zhiiw
committed
f14e621
fix(release): verify legacy installers against legacy resources
zhiiw
committed
e1b9786
fix(release): exclude generated npm bin links
zhiiw
committed
9f1418b
feat(storage): bind dependency environments to managed execution
zhiiw
committed
4e97dc7
fix(storage): reject stale managed source baselines
zhiiw
committed
06959fe
docs(storage): define source reopen validation
zhiiw
committed
327f7c1
fix(storage): make managed dependency admission cancellable
zhiiw
committed
1a409cb
fix(storage): replace aborted dependency publications
zhiiw
committed
01fde4f
fix(storage): cancel managed baseline admission
zhiiw
committed
141f2d2
fix(storage): close managed execution admission gaps
zhiiw
committed
1875477
test(runtime-host): complete managed owner fake
zhiiw
committed
e08cc56
fix(storage): align workspace authority with interactive roots
zhiiw
committed
51a73b6
test(storage): enforce managed source drift rejection
zhiiw
committed
6683551

Navigation Menu

Uh oh!

feat(storage): bind and cancel managed dependency admission - #2622

feat(storage): bind and cancel managed dependency admission#2622
zhiiw wants to merge 20 commits into
apache:mainfrom
zhiiw:codex/managed-admission-cancellation-authority

Commits on Aug 23, 2026

feat(runtime-host): constrain managed npm provisioning

fix(runtime-host): defer npm admission to runtime attestation

fix(runtime-host): reap descendants after producer root exit

feat(runtime-host): attest bundled npm runtime

test(runtime-host): verify real bundled npm installs

fix(runtime-host): keep Windows npm home path bounded

fix(release): canonicalize bundled npm verifier paths

style(runtime-host): format rebased producer boundary

fix(release): verify legacy installers against legacy resources

fix(release): exclude generated npm bin links

feat(storage): bind dependency environments to managed execution

fix(storage): reject stale managed source baselines

docs(storage): define source reopen validation

fix(storage): make managed dependency admission cancellable

fix(storage): replace aborted dependency publications

fix(storage): cancel managed baseline admission

fix(storage): close managed execution admission gaps

test(runtime-host): complete managed owner fake

fix(storage): align workspace authority with interactive roots

test(storage): enforce managed source drift rejection