fix(security): harden auth and status-list allocation - #1706

Open

sign-mark wants to merge 10 commits into

credebl:mainfrom

sign-mark:agent/harden-auth-passkeys-status-list

Commits on Aug 21, 2026

fix(security): harden auth and status-list allocation
sign-mark
committed
6f3feb8
fix(security): address passkey and status-list review findings
sign-mark
committed
e90677e
test(security): cover review edge cases
sign-mark
committed
97c8ea2
test(security): tighten passkey and allocator coverage
sign-mark
committed
0fc4cc4
fix(security): address passkey and allocation edge cases
sign-mark
committed
443dc52
fix(security): retain slots after offer creation
sign-mark
committed
71ffb7a
test(security): cover missing and deleted passkey devices
sign-mark
committed
816a581
docs(security): clarify issuer and migration safeguards
sign-mark
committed
63f1109
fix(security): scrub demo secrets, backfill legacy passkey rows, drop dead code
ajile-in
committed
3b28a10

Commits on Aug 22, 2026

fix(security): resolve SonarCloud code smells across auth and migration
ajile-in
committed
c87576d