fix(artifacts): guardrails and correctness (CL-4686) - #3

Merged

TheGreatAxios merged 14 commits into

mainfrom

fix/artifacts-guardrails-correctness

Jul 29, 2026

Commits on Jul 29, 2026

fix(reference-host): align tenantId/principalId with Identity API
TheGreatAxios
committed
81b941b
fix(artifacts): gate destructive test harness behind opt-in + allowlist
TheGreatAxios
committed
4841a98
fix(deps): bump drizzle-orm to 0.45.2 and force single install
TheGreatAxios
committed
6c802a5
fix(artifacts): archive returns durable archivedAt via UPDATE RETURNING
TheGreatAxios
committed
c0fab0a
fix(artifacts): bound web_site path length and count path bytes in total
TheGreatAxios
committed
b645a59
fix(artifacts): fail closed on mail attachment integrity and use canonical metadata
TheGreatAxios
committed
5c46db6
fix(artifacts): empty migration ledger fails closed or adopts after shape check
TheGreatAxios
committed
ee4ee87
fix(artifacts): store event timestamps as timestamptz
TheGreatAxios
committed
a873196
fix(artifacts): omit content from list discovery projection
TheGreatAxios
committed
fae4ebb
fix(artifacts): bound write sizes and paginate version history
TheGreatAxios
committed
02317ee
fix(artifacts): enforce tenant NOT NULL and row-local CHECKs
TheGreatAxios
committed
7c69c5d
fix(artifacts): auth before body parse on mutating JSON routes
TheGreatAxios
committed
36163d5
fix(ci): unblock typecheck and destructive test gate
TheGreatAxios
committed
371bc29
fix(artifacts): tighten adopt shape for nullability and CHECKs
TheGreatAxios
committed
7faf502