Harden input validation and authorization on the query, schema, SSO and MCP surfaces by jfrench9 · Pull Request #1945 · RoboFinSystems/robosystems

Keep lockfile hashes when installing the Lambda image's dependencies

jfrench9

committed

005659f

Re-check the enqueuing user's graph role when a worker task is dequeued

jfrench9

committed

b1e95eb

Bind event-handler approval to the reviewed version; a rename over MCP is substantive

jfrench9

committed

93ed151

Mask counterparty tax IDs at the GraphQL field for the MCP surface

jfrench9

committed

56ef529

Validate memory ids on every surface before a Graph API path is built

jfrench9

committed

735f61a

Run the burst limiter before credential checks on graph routes

jfrench9

committed

c53274d

Make the Stripe webhook inert without billing and refuse placeholder secrets at boot

jfrench9

committed

8a46041

Bind cross-app SSO handoffs to the browser that started them

jfrench9

committed

c5f4d86

Refuse unknown fields on command bodies whose fields all default

jfrench9

committed

cb7e576

Check out the dispatched commit in CI builds

jfrench9

committed

1b0f172

Classify Cypher keywords by token

jfrench9

committed

3f60f0a

Validate custom-schema identifiers and restrict creation DDL to table definitions

jfrench9

committed

64258d4

Approval journey tests name the version they reviewed

jfrench9

committed

9f088f3

Store the browser binding on the unlocked exchange path too

jfrench9

committed

e7f5e4a

Refuse statement keywords as custom-schema names at the boundary

jfrench9

committed

2b8a32d

Drop the analyzer's unused regex attributes; restore a docstring

jfrench9

committed

ed02d74

Navigation Menu

Repository navigation

Harden input validation and authorization on the query, schema, SSO and MCP surfaces - #1945

Harden input validation and authorization on the query, schema, SSO and MCP surfaces#1945
jfrench9 merged 16 commits into
mainfrom
bugfix/input-validation-hardening

Commits on Oct 25, 2026

Keep lockfile hashes when installing the Lambda image's dependencies

Re-check the enqueuing user's graph role when a worker task is dequeued

Bind event-handler approval to the reviewed version; a rename over MCP is substantive

Mask counterparty tax IDs at the GraphQL field for the MCP surface

Validate memory ids on every surface before a Graph API path is built

Run the burst limiter before credential checks on graph routes

Make the Stripe webhook inert without billing and refuse placeholder secrets at boot

Bind cross-app SSO handoffs to the browser that started them

Refuse unknown fields on command bodies whose fields all default

Check out the dispatched commit in CI builds

Classify Cypher keywords by token

Validate custom-schema identifiers and restrict creation DDL to table definitions

Approval journey tests name the version they reviewed

Store the browser binding on the unlocked exchange path too

Refuse statement keywords as custom-schema names at the boundary

Drop the analyzer's unused regex attributes; restore a docstring