Lock the D28 stage-override write logic (legal-wall reject, delete+audit, rollback)

TestSecurityService
Shipped
July 4, 2026 at 1:43 AM UTC
Author
Kamo
Commit
7a80afc

6 tests over the new MlosConfigWriteService methods: legal-wall stages rejected before any write; routine upsert bumps profileVersion + appends the WORM change-log snapshot with server-truth identity; validation failure rolls back before the log append; delete is a hard remove audited as {"deleted":true,row}; missing-override delete is a no-op; delete of a legal-wall stage is rejected. Live smoke confirmed both endpoints deployed + routed + fail-closed (401 without a session).

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing