Audit hardening: tenant isolation, TLS-enforcing production profile, PG pooling & migrations, hash-pinned supply chain, real SLIs#189

Merged

brownjuly2003-code merged 20 commits into

mainfrom

Jul 12, 2026

fix(search): enforce the entity allowlist before scoring (P0-4)

JuliaEdom
and
claude
committed
feat(serving): provisioning is a writer privilege, not a boot side effect (P0-2)

JuliaEdom
and
claude
committed
fix(serving): route every read surface and health through the backend (P0-3)

JuliaEdom
and
claude
committed
fix(serving): make the tenant boundary physical, on both stores (P0-1)

JuliaEdom
and
claude
committed
fix(serving): prove the tenant boundary, and delete the one that was not there (P0-1 tail)

JuliaEdom
and
claude
committed
fix(release): keep secrets out of the image, and stop calling a fixture a backup (P1-2, P1-4)

JuliaEdom
and
claude
committed
ci: lint what ships, time out every job, gate the TS SDK (P1-3, P1-5)

JuliaEdom
and
claude
committed
chore: keep the session handoff out of the repo

JuliaEdom
and
claude
committed

Provide feedback