Skip to content

Lock host secrets and overlapping send plus inbound poll - #35

Merged
jsoneaday merged 1 commit into
mainfrom
phase-7-hardening
Sep 22, 2026
Merged

jsoneaday merged 1 commit into
mainfrom
phase-7-hardening

Conversation

@jsoneaday

Copy link
Copy Markdown
Owner

Summary

  • Connector invoke payloads do not carry host API keys, and host messaging sources do not call Slack.
  • A send that is still in flight and an inbound poll both keep their rows.

Closes #22

Test plan

  • swift test DerrickBackend HostSecretBoundaryTests and MessagingSendInboundConcurrencyTests

Made with Cursor

Connector invoke must not carry host API keys, and a send in flight must not drop an inbound row.

Co-authored-by: Cursor <cursoragent@cursor.com>
@jsoneaday jsoneaday self-assigned this Sep 22, 2026
@jsoneaday
jsoneaday merged commit df9617b into main Sep 22, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Phase 7: Hardening (secrets and concurrency)

1 participant