Close residual cross-org existence oracles + cap WORM-bound JSON blobs

FixSecurityService
Shipped
July 3, 2026 at 5:31 AM UTC
Author
Kamo
Commit
c6d455b

Adversarial-review findings MLOS-W-01/03/04: - the 404-normalized empty list envelope now echoes the request's identity keys **************** so unknown, foreign-org and own-empty results are byte-identical in SHAPE, not just status - key presence was itself an oracle (and broke the UI's declared envelope type); - by-id reads re-craft downstream 404s with the proxy's own message so unknown-id and foreign-org probes are indistinguishable (governance pullThroughActive, pricing runDetail/results/adjustments); - correctedValue + stewardRoutingThresholdsJson capped at 8k chars before they can reach a permanent WORM row (mirrors the pricing facts caps).

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing