2 Commits

Author	SHA1	Message	Date
Jakub Zych	183583e0e9	feat(16.3-01): interactive-only gates, ResolveBackend, last_used stamp ... - Refuse g15_ tokens on account/avatar/refresh/logout; gate field-types and markdown - Publish cookie-less ResolveBackend; debounce last_used_at once per minute - Reserve account vendor segment; TestTokenGatesSmoke covers the deny path Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-11 01:47:52 +02:00
Jakub Zych	b9273c1da7	feat(16.3-01): tracer — g15_ token scopes through composite backend guard ... - Add pact.TokenScope/HasTokenScopes and bouncer.ScopeLimit on Principal - Append backend_api_tokens migration; Allows evaluates scope before superuser - Composite guard routes Bearer g15_… to token lookup; smoke tests cover path Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-11 01:46:32 +02:00