| content |
{"Commits":[{"Sha1":"2ba689eec {"Commits":[{"Sha1":"2ba689eec37d482baac4bed44ffe7d8cc9469ce0","Message":"docs(ledger): note the local token hardening on K4.3b and K4.3c (status stays partial)\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-02T23:00:42-07:00"},{"Sha1":"63c3199c8077449437518c9e600bacb003f5bb04","Message":"Merge remote-tracking branch 'origin/main' into claude/gap-token-hardening\n\n# Conflicts:\n#\tdocs/v1.1-local-contracts-draft.md\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-02T22:51:55-07:00"},{"Sha1":"2b2a4523a8a2a87113161e4b298a00521f75c576","Message":"Token hardening: dev-only switch, key rotation, single-use replay detection, issuance revocation\n\nK4.3b / K4.3c local part, all inside the local HMAC issuer (no identity provider):\n\n- KERNEL_ENV=production refuses to start unless KERNEL_LOCAL_TOKEN_ISSUER=dev-only\n (before any database connection, like APP_ID).\n- Key rotation: KERNEL_TOKEN_KEY_ID names the current key, KERNEL_TOKEN_PREVIOUS_KEYS\n lists at most three previous keys (keyId=secret). Tokens are issued with the current\n key only and carry its kid; the unnamed key is `default` and its tokens are unchanged.\n- Replay detection as single-use tokens for service and Execution tokens (`singleUse`\n at issuance, claim `once`): the first use binds the jti to one request in\n shared.token_use; a retry of that request passes, any other request is refused with\n 401 and traced as TOKEN_REPLAYED.\n- RevokePrincipalToken revokes one issuance (append-only human.principal_token_revocation,\n event PrincipalTokenRevoked); the service route checks it in the command transaction on\n every use and refuses with 403 PRINCIPAL_TOKEN_REVOKED.\n\nMigration 167. Default behaviour (no new env, multi-use tokens, v1/v2 window) is unchanged.\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-02T22:51:18-07:00"}],"HeadCommit":{"Sha1":"2ba689eec37d482baac4bed44ffe7d8cc9469ce0","Message":"docs(ledger): note the local token hardening on K4.3b and K4.3c (status stays partial)\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-02T23:00:42-07:00"},"CompareURL":"luoanwu/seven-domain-five-dimension-unified-model/compare/d3035b645308fc8bf107c6c7b1a98229b7af7c14...2ba689eec37d482baac4bed44ffe7d8cc9469ce0","Len":3}... |