John SmithandClaude e2132271e7 fix(relay): write authorization bound to verified connection origin (iteration 43) ...

Closes A3 #3/#4: atmosphere AND speech guards no longer trust forgeable
Yjs clientIDs — SETs and DELETEs both gate on the delivering connection's
HMAC-verified role/user. Corrective broadcasts rate-limited per connection
(5/min then close 4008); persistence debounced 1s with flush on shutdown.
Red tests reproduced forged-GM-clientID acceptance before the fix; live
smoke verified eviction+restore, disconnect, zero mid-debounce writes.
66 relay tests passing (20 new).

Co-Authored-By: Claude <[email protected]>

2026-08-25 10:23:39 -04:00

..

__tests__

fix(relay): write authorization bound to verified connection origin (iteration 43)

2026-08-25 10:23:39 -04:00

docker_smoke_test.sh

feat(wave15): zero-trust hardening, real WFC, write-through Postgres, RBAC, Yjs default

2026-08-23 22:41:53 -04:00

measure_slas.sh

feat(playtest): SLA measurement harness — honest latency tables (iteration 62)

2026-08-24 07:09:21 -04:00

run_all_benchmarks.sh

feat(playtest): measurable AFPR + auditor recall probes

2026-08-24 01:08:47 -04:00

start_all_services.sh

feat: complete Phases 1-7 enterprise autonomous AI-native virtual tabletop engine

2026-08-22 17:34:37 -04:00

ysync_atmosphere_guard.mjs

fix(relay): write authorization bound to verified connection origin (iteration 43)

2026-08-25 10:23:39 -04:00

ysync_relay_throttle.mjs

fix(relay): write authorization bound to verified connection origin (iteration 43)

2026-08-25 10:23:39 -04:00

ysync_speech_guard.mjs

fix(relay): write authorization bound to verified connection origin (iteration 43)

2026-08-25 10:23:39 -04:00

ysync-server.mjs

fix(relay): write authorization bound to verified connection origin (iteration 43)

2026-08-25 10:23:39 -04:00