fix: post-11.07 audit — 8 findings (webhook keyset cursor, helm PG egress/PDB/selector, control-plane clock & retry, E4 settle window)#200

Merged

brownjuly2003-code merged 11 commits into

mainfrom

fix/audit-post11

Jul 17, 2026

Commits on Jul 17, 2026

fix(e4): replica checks dwell a settle window, not assert on first sighting

JuliaEdom
and
claude
committed
fix(control-plane): compute next_attempt_at on the DB clock, not the app clock
JuliaEdom
committed
docs(deps): document that ignore also gates security-update PRs (audit #8)

JuliaEdom
and
claude
committed
fix(control-plane): retry record_webhook_delivery_outcome on transient DB errors
JuliaEdom
committed
fix(helm): stable component=api selector, PG egress, api-scoped PDB (audit #5 #6 #7)

JuliaEdom
and
claude
committed
fix(webhook): composite keyset cursor so a saturated second can't wedge the journal scan

JuliaEdom
and
claude
committed
docs: record post-11.07 audit fixes; keyset cursor in serving-bridge

JuliaEdom
and
claude
committed
style(tests): ruff format three audit-fix test files

JuliaEdom
and
claude
committed
test: align PG claim probes with the enqueue lease; live-CH keyset regression

JuliaEdom
and
claude
committed
fix(webhook): settle watermark — the keyset frontier crosses only closed seconds

JuliaEdom
and
claude
committed
fix(webhook): settle=0 is a true opt-out; pin the production stamp frame in tests

JuliaEdom
and
claude
committed