Commit graph

10 commits

Author SHA1 Message Date
a1beca284b Accept Cloud SQL provider-owned large-object residual
Some checks are pending
CI / lint-and-test (push) Waiting to run
On Cloud SQL, large objects created via PUBLIC privilege are owned by
the provider role, not the creating user. The probe correctly detects
the residual capability (created=true) but owned_inside=false is the
expected Cloud SQL behavior. Report the actual value instead of
rejecting it.
2026-07-24 13:19:34 -07:00
75ee585814 Normalize Cloud SQL identity addresses 2026-07-23 18:56:39 -07:00
963ab34584 Harden leoclean runtime authority checks 2026-07-22 20:15:53 -07:00
6d7ea14bfb Bind no-send database proof to container identity 2026-07-22 15:24:54 -07:00
508e1bdb28 Handle Cloud SQL provider database residuals 2026-07-21 19:01:34 -07:00
e850f0e6bd Harden Cloud SQL staging runtime boundary 2026-07-21 13:44:43 -07:00
Fawaz
77e1336c0f
Restrict leoclean runtime reads to queried columns (#179)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Restrict leoclean runtime reads to queried columns

* Repair leoclean runtime authority review findings

* Harden leoclean query and CI permission contracts
2026-07-17 06:31:37 -04:00
Codex Integration
822438bd2f Merge main and repair GCP runtime integration 2026-07-15 12:51:17 +02:00
twentyOne2x
7b16c6d3cc fix: prove least-privilege GCP Leo runtime context 2026-07-15 07:16:40 +02:00
twentyOne2x
b7bdcea46a fix: enforce scoped GCP Leo runtime credentials 2026-07-15 04:40:26 +02:00