Repository navigation

GEN-2824 add bounded bearer forwarding - #375

Draft

asselstine wants to merge 47 commits into

mainfrom

GEN-2824-proxy-forwarding

Draft

GEN-2824 add bounded bearer forwarding#375
asselstine wants to merge 47 commits into
mainfrom
GEN-2824-proxy-forwarding

Commits on Nov 11, 2026
- feat(credential-proxy): add bounded bearer forwarding
  
  exe.dev user
  authored and
  exe.dev user
  committed
  2c56c36
- feat(credential-proxy): stream authorized tunnel requests
  
  exe.dev user
  authored and
  exe.dev user
  committed
  41d09a3
- feat(credential-proxy): connect authenticated VM tunnel
  
  exe.dev user
  authored and
  exe.dev user
  committed
  f00b2f0
- Bind enrollment acceptance to proxy boot epoch
  
  exe.dev user
  authored and
  exe.dev user
  committed
  08fddf2
- Bind tunnel enrollment to authenticated VM peer
  
  exe.dev user
  authored and
  exe.dev user
  committed
  adfefc5
- Add authenticated proxy boot registration
  
  exe.dev user
  authored and
  exe.dev user
  committed
  5b44328
- Add secure proxy bootstrap provisioning boundary
  
  exe.dev user
  authored and
  exe.dev user
  committed
  1ed566e
- Provision credential proxy with isolated bootstrap
  
  exe.dev user
  authored and
  exe.dev user
  committed
  edf98ea
- Retry proxy tunnel enrollment before forwarding
  
  exe.dev user
  authored and
  exe.dev user
  committed
  e631553
- Add authenticated proxy enrollment control API
  
  exe.dev user
  authored and
  exe.dev user
  committed
  545d9e7
- Wire proxy-side run enrollment into tunnel auth
  
  exe.dev user
  authored and
  exe.dev user
  committed
  f1ff6ad
- Wire proxy control enrollment into tunnel startup
  exe.dev user
  committed
  b4462a2
- Merge remote-tracking branch 'origin/main' into GEN-2824-proxy-forwarding
  exe.dev user
  committed
  a96a584
- Retain proxy control credential after boot registration
  exe.dev user
  committed
  ef4b952
- Authenticate tunnel enrollment with run credential
  exe.dev user
  committed
  59e6bea
- Keep run credential out of consume request
  exe.dev user
  committed
  2188c7d
- Cover invalid run enrollment bindings
  exe.dev user
  committed
  78b86ee
- Narrow active run identity before enrollment
  exe.dev user
  committed
  c46c3a2
- Close proxy tunnels when a run is revoked
  exe.dev user
  committed
  fd74010
- Add decrypted run integration grant resolver
  exe.dev user
  committed
  68d348e
- Expose selected integrations to authenticated proxy
  exe.dev user
  committed
  eb90329
- Merge remote-tracking branch 'origin/main' into GEN-2824-proxy-forwarding
  exe.dev user
  committed
  3e79721
- Fix encrypted snapshot proxy test fixture
  exe.dev user
  committed
  6f13d7b
- Wire proxy snapshots into local grant resolution
  exe.dev user
  committed
  fea379c
- Preserve grant resolver selection boundaries
  exe.dev user
  committed
  b765691
- Resolve empty and locked grants safely
  exe.dev user
  committed
  15335fa
- Match snapshot control request contract
  exe.dev user
  committed
  32414a2
- Bind tunnel VM identity to certificate SAN
  exe.dev user
  committed
  c22a412
- GEN-2824 provision mTLS identities and revoke tunnels
  exe.dev user
  committed
  3ed3f07
- GEN-2824 include selected model account snapshot
  exe.dev user
  committed
  a3aad85
Commits on Nov 12, 2026
- GEN-2824 update snapshot fixture for model selection
  exe.dev user
  committed
  463ce53
- GEN-2824 add isolated Codex auth helper
  exe.dev user
  committed
  44c5bde
- GEN-2824 persist encrypted Codex account refreshes
  exe.dev user
  committed
  69f05bc
- GEN-2824 encrypt Codex account caches in proxy
  exe.dev user
  committed
  454232c
- GEN-2824 restore encrypted Codex caches on unlock
  exe.dev user
  committed
  28f8f1c
- GEN-2824 persist encrypted model caches by revision
  exe.dev user
  committed
  d27d95a
- GEN-2824 compose model cache lifecycle into proxy startup
  exe.dev user
  committed
  df221e5
- GEN-2824 add private browser model authorization control
  exe.dev user
  committed
  a20d434
- GEN-2824 issue paired model account browser capabilities
  exe.dev user
  committed
  c876176
- GEN-2824 connect model account browser authorization
  exe.dev user
  committed
  dd266cc
- GEN-2824 cover capability endpoint in browser test
  exe.dev user
  committed
  2ccb27b
- GEN-2824 add model account create and delete
  exe.dev user
  committed
  87341ad
- GEN-2824 recover stale model account cache writes
  exe.dev user
  committed
  4e4a5c0
- GEN-2824 clear deleted model caches on unlock
  exe.dev user
  committed
  e5a6a97
- GEN-2824 cover model cache key rotation race
  exe.dev user
  committed
  29cd548
- GEN-2824 cover model reset refresh race
  exe.dev user
  committed
  7a4fdfa
- GEN-2824 cover reset during refresh retry
  exe.dev user
  committed
  5a5f01a

Commits

Commits on Nov 11, 2026

Commits on Nov 12, 2026