2 Commits

Author	SHA1	Message	Date
cloudinit-bot	79a3358810	feat(P3): Window authorization — open/lifecycle/audit log (REQ-042) ... web/handlers/window.go: GET /window (list), GET /window/new (form), POST /window (open), GET /window/{id} (detail+lifecycle+audit), POST /window/{id}/activate|revoke|expire (lifecycle transitions). Store extensions: OpenWindow/ActivateWindow/RevokeWindow/ExpireWindow/ ListWindows/GetWindow/GetAuditLog — all call the REAL x/window/types Window.Activate/Revoke/Expire methods (not reimplementation). Revoke on Expired is a no-op (v0.2 terminal-state contract). AuditEntry appended on each transition. 3 Window templates. window_test.go: lifecycle correctness (asserts real methods invoked), idempotent revoke, revoke-on- expired no-op, G-026 error lexicon checks. Coverage: store 99.2%, handlers 87.7%. ---ci--- project: oy phase: 3 milestone: v0.6 status: execute ---/ci---	2026-08-18 18:58:25 +00:00
cloudinit-bot	5a12ab0e76	feat(P1): mock store + fixtures + import-invariant test (REQ-040, G-025, G-027) ... web/store instantiates real x/identity/types.Reach + x/stash/types.Stash (app-layer consumption per D-070, NOT a cross-x/ import). CreateReach atomically creates Reach (IsNomad=true) + Stash (D-071). G-027 validates HolderID/PublicKey (non-empty, <=128, no path separators, no template syntax). import_test.go enforces G-025: web/ imports only x/*/types, never x/*/keeper or x/<module> (module.go). Coverage 100%. ---ci--- project: oy phase: 1 milestone: v0.6 status: execute ---/ci---	2026-08-18 13:45:05 +00:00