fix(tangle): never cache or share single-use broker tokens - #579

Merged

drewstone merged 10 commits into

mainfrom

fix/single-use-broker-token-provider

Sep 14, 2026

Commits on Sep 12, 2026

fix(tangle): mint a separate single-use broker bearer per execution
drewstone
committed
bf4b4c3
test(tangle): reject broker token reuse across sequential and concurrent calls
drewstone
committed
dffa3d0
ci: run package checks on pull requests without release credentials
drewstone
committed
6035d62
test(tangle): exercise concurrent single-use bearer consumption
drewstone
committed
c90e33a
ci: commit generated API references on same-repository PRs and test exact head
drewstone
committed
4d72061
docs: regenerate broker token API references
github-actions[bot]
authored
0ac4d70
ci: verify exact committed docs read-only and retain structured test reports
drewstone
committed
cb4ae4f
ci: keep verification archives outside the dependency-audited source tree
drewstone
committed
979cb74
ci: use a valid job environment context for verification output
drewstone
committed
cdd600a

Commits on Sep 13, 2026

ci: honor repository Node/action pins and check the release contract on PRs
drewstone
committed
1f8cea4