Entitlement, M-of-N, and break-glass as a grant - #154

Merged

arpanghoshal merged 8 commits into

mainfrom

v0.8/3-entitlement

Sep 12, 2026

Commits on Sep 12, 2026

Renumber item 2's resumed-leg test off item 3's first id
arpanghoshal
committed
b66cf9b
Entitlement from the control registry, and M-of-N on distinct principals
arpanghoshal
committed
115ab83
T313: the M-of-N window, which the mutation table found nothing covering
arpanghoshal
committed
d771dcd
Answer the review: two fail-open holes, and eight smaller things
arpanghoshal
committed
c8b9457
The windows do not share a box: run the proxy suites serially
arpanghoshal
committed
1c1b470
Break-glass as a grant: the envelope, the command, and no flag anywhere
arpanghoshal
committed
4b91f15
Item 5's changelog, §14.5, and what the mutation table found
arpanghoshal
committed
7e93646
Answer item 5's review: a complete bypass, a typo that gated nobody, and an
arpanghoshal
committed
50908f4