a1beca284b
Accept Cloud SQL provider-owned large-object residual
...
CI / lint-and-test (push) Waiting to run
On Cloud SQL, large objects created via PUBLIC privilege are owned by
the provider role, not the creating user. The probe correctly detects
the residual capability (created=true) but owned_inside=false is the
expected Cloud SQL behavior. Report the actual value instead of
rejecting it.
2026-07-24 13:19:34 -07:00
75ee585814
Normalize Cloud SQL identity addresses
2026-07-23 18:56:39 -07:00
963ab34584
Harden leoclean runtime authority checks
2026-07-22 20:15:53 -07:00
6d7ea14bfb
Bind no-send database proof to container identity
2026-07-22 15:24:54 -07:00
508e1bdb28
Handle Cloud SQL provider database residuals
2026-07-21 19:01:34 -07:00
e850f0e6bd
Harden Cloud SQL staging runtime boundary
2026-07-21 13:44:43 -07:00
Fawaz
77e1336c0f
Restrict leoclean runtime reads to queried columns ( #179 )
...
CI / lint-and-test (push) Waiting to run
* Restrict leoclean runtime reads to queried columns
* Repair leoclean runtime authority review findings
* Harden leoclean query and CI permission contracts
2026-07-17 06:31:37 -04:00
Codex Integration
822438bd2f
Merge main and repair GCP runtime integration
2026-07-15 12:51:17 +02:00
twentyOne2x
7b16c6d3cc
fix: prove least-privilege GCP Leo runtime context
2026-07-15 07:16:40 +02:00
twentyOne2x
b7bdcea46a
fix: enforce scoped GCP Leo runtime credentials
2026-07-15 04:40:26 +02:00