Give every PAM failure a stable, machine-readable code - #8235

Draft

Hinton wants to merge 27 commits into

pam/error-codes

Commits on Aug 17, 2026

feat(pam): withhold gated cipher secrets behind a type-checked witness
Hinton
authored
1ad313b
style: apply dotnet format
Hinton
authored
11bf643
refactor(pam): emit partial cipher data as a camelCase envelope
Hinton
authored
dab90e8
refactor(pam): namespace the Core-side leasing gate under Bit.Core
Hinton
authored
aef7622
fix(pam): register the OSS leasing gate with AddScoped
Hinton
authored
53aad21
refactor(pam): make the partial and full cipher shapes distinct types
Hinton
authored
342ac95
refactor(sync): fold the two cipher filters into one
Hinton
authored
86fee45
chore(sync): use the SDK feature service
Hinton
authored
38e4a56
refactor(pam): name the OSS gate for what it does
Hinton
authored
a623ee2
docs(pam): state the leasing gate's contract and where decisions live
Hinton
authored
da37d38
chore: drop the unused feature service from the export controller
Hinton
authored
cac0497
docs(pam): drop the remark on UnrestrictedCipherLeaseGate
Hinton
authored
640824d
refactor(pam): make PartialCipherData the shape it describes
Hinton
authored
46c4de4
refactor(pam): filter the export in the controller, not the response model
Hinton
authored
588cf3c
refactor(pam): choose the cipher response shape through one factory
Hinton
authored
2724685
refactor(pam): choose the cipher response shape through one factory
Hinton
authored
bbc9aeb
wip(pam): materialize POC lease/access-request blobs verbatim

patriksvensson
and
claude
committed
24e0e41
feat(pam): implement lease, access-request, and cipher-lease endpoint handlers

patriksvensson
and
claude
committed
9e05561
Migrate the commercial CipherLeaseGate read path so PAM-governed ciphers are gated
abergs
committed
037adc4

Commits on Aug 18, 2026

Add PAM approver-inbox and access-request push notifications
abergs
committed
93d89e4
Gate mutations of leased ciphers behind a valid active lease

patriksvensson
and
claude
committed
c086bcb
Add the PAM access-audit event store

patriksvensson
and
claude
committed
d06d9fa
Record and expose the PAM access-audit trail

patriksvensson
and
claude
committed
c24e862
Record rule administration in the PAM audit trail

patriksvensson
and
claude
committed
1dc37e0

Commits on Aug 19, 2026

Enforce an access rule's lease duration bounds when requesting access

patriksvensson
and
claude
committed
1f927dc

Commits on Aug 20, 2026