3 Commits

Author	SHA1	Message	Date
Josh Avant	788f56f30f	Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141) ... * Secrets: enforce C2 SecretRef policy and drift resolution * Tests: add gateway auth startup/reload SecretRef runtime coverage * Docs: sync C2 SecretRef policy and coverage matrix * Config: hard-fail parent SecretRef policy writes * Secrets: centralize unsupported SecretRef policy metadata * Daemon: test service-env precedence for token drift refs * Config: keep per-ref dry-run resolvability errors * Docs: clarify config-set parent-object policy checks * Gateway: fix drift fallback and schema-key filtering * Gateway: align drift fallback with credential planner * changelog Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com> --------- Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>	2026-03-31 02:37:31 -05:00
Vincent Koc	79f2173cd2	docs: add missing frontmatter and title fields ... - Add full frontmatter (title, summary, read_when) to 4 files that had none: auth-credential-semantics.md, kilo-gateway-integration.md, CONTRIBUTING-THREAT-MODEL.md, THREAT-MODEL-ATLAS.md - Add missing title field to 3 provider docs: kilocode.md, litellm.md, together.md Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-18 00:02:43 -07:00
Josh Avant	1c200ca7ae	follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733) ... Merged via squash. Prepared head SHA: c290c2ab6a Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com> Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com> Reviewed-by: @joshavant	2026-03-03 20:29:46 -06:00