4 commits

Author	SHA1	Message	Date
tegwick	0d4f4b5cc2	test(human-control): admit the serving path so the claim refusal is what is tested ... Since ebd8e49 the responder-trust preflight refuses before the claim is read, so this test passed its fail-closed intent only by accident of an earlier refusal and then failed its regex. Configure an admitted PDP path so the undeclared human_control claim is the refusal again. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 17890@bnt-lap001 Assistant-Session: 7d96d43c-0154-4a22-af71-71c349ac6dc3	2026-10-21 08:48:55 +02:00
tegwick	c80a944105	fix(auth): authenticate producer-signed decisions before authorization ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 07:51:44 +02:00
tegwick	e33f9c3ca5	Finish companion catalog work and reconcile completed approval tasks ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e324-abce-7e51-bb2b-496f097afdb0	2026-09-27 16:15:01 +02:00
tegwick	2b0d04e8e1	Require declared human control in factory credential delivery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-10 20:16:55 +02:00