Close residual cross-org existence oracles + cap WORM-bound JSON blobs

FixSecurityService
Ya
3 Julai 2026, 05:31 UTC
Mwandishi
Kamo
Ahadi ya
c6d455b

Adversarial-review findings MLOS-W-01/03/04: - the 404-normalized empty list envelope now echoes the request's identity keys **************** so unknown, foreign-org and own-empty results are byte-identical in SHAPE, not just status - key presence was itself an oracle (and broke the UI's declared envelope type); - by-id reads re-craft downstream 404s with the proxy's own message so unknown-id and foreign-org probes are indistinguishable (governance pullThroughActive, pricing runDetail/results/adjustments); - correctedValue + stewardRoutingThresholdsJson capped at 8k chars before they can reach a permanent WORM row (mirrors the pricing facts caps).

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei