- Shipped
- October 19, 2026 at 12:05 AM UTC
- Author
- Kamo
- Commit
- b5c65e9
godModeActive() now also needs godModeExpiresAt (epoch millis, number or string) to be after now. SecurityService masks an elapsed window only for its own gates and clears it on the next status poll, so every service reading *** straight from Redis kept treating a CLOSED 30-minute break-glass window as open, holding every platform right until then. A flag with no readable stamp is closed, as in GodModeSession. from(session, now) for tests; godEligible() unchanged. (Owner 2026-10-18, IoT master section 10 R7.)
