sax3l/c0py
3
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(api): deterministic scan worker + AUD0 wire + tenant binding #4

Closed
admin wants to merge 0 commits from feat/scan-worker into main
pull from: feat/scan-worker
merge into: sax3l:main
Conversation 0 Commits - Files Changed -
admin commented 2026-09-16 20:53:57 +00:00
Owner
Copy Link
Copy Source

Landad som merge (CI grön 3/3).

Landad som merge (CI grön 3/3).
admin added 1 commit 2026-09-16 20:53:57 +00:00
feat(api): deterministic scan worker + AUD0 wire + tenant binding
CI (SIAX Cloud) / security (pull_request) Successful in 14s
Details
CI (SIAX Cloud) / security (push) Successful in 14s
Details
CI (SIAX Cloud) / contracts (pull_request) Successful in 15s
Details
CI (SIAX Cloud) / contracts (push) Successful in 17s
Details
CI (SIAX Cloud) / quality (push) Successful in 1m9s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 1m10s
Details
12f6a65b80 
- scan worker: atomic claim (FOR UPDATE SKIP LOCKED), Playwright-core + system
  chromium capture → typed EvidenceRecords (runtime-html/dom/computed-style/
  stylesheet/asset/network-request/screenshot), confidence=measured
- AUD0 emitter (fire-and-forget, advisory): c0py.registry_created/.scan_created/
  .scan_completed/.scan_failed, tenant_id = Zitadel resourceowner (org)
- tenant binding: resourceowner claim from introspection (deny-by-default 403),
  migration 002 tenant_id on registries+scans, all queries tenant+owner scoped
- evidence gaps stay explicit (screenshot miss → no screenshot record)
- 30/30 tests, canonical validator OK
admin closed this pull request 2026-09-16 20:56:30 +00:00
All checks were successful
CI (SIAX Cloud) / security (pull_request) Successful in 14s
Required
Details
CI (SIAX Cloud) / security (push) Successful in 14s
Details
CI (SIAX Cloud) / contracts (pull_request) Successful in 15s
Required
Details
CI (SIAX Cloud) / contracts (push) Successful in 17s
Details
CI (SIAX Cloud) / quality (push) Successful in 1m9s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 1m10s
Required
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
P0-critical
Drop-everything: active exploit path, live credential exposure, or data-loss risk
 P1-high
Real risk or blocker, not actively burning, should not wait long
 P2-normal
Real but not urgent
 auto-verified
Confirmed by actually running code/tests, not by reading a claim
 blocked
Blocked on another issue/PR/external dependency
 needs-simon
Cannot proceed without Simon's decision or an action only he can take
 ready-for-review
A PR already exists and is waiting on human review/merge decision
 type:data-integrity
Duplicate truth, drift, unverified claim, migration correctness
 type:governance
Process, ownership, incident-response, review-flow
 type:infra
Server/deploy/CI/branch-protection/infrastructure config
 type:product-decision
Needs a business/architecture call only Simon can make
 type:security
Vulnerability, auth gap, credential handling
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
admin (Simon Axelsson) siax-bot siax-healer (siax-healer (CI self-healing agent))
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sax3l/c0py#4
Delete Branch "feat/scan-worker"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?