coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Separate event and mail delivery credentials
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-08-13 14:56:24 +02:00
parent 9480463b24
commit a0f39f58bd
4 changed files with 45 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

9
workplans/USER-WP-0021-portal-product-expansion.md
View file

@ -212,3 +212,12 @@ metadata update, retirement, and reactivation contract. This task is waiting
on that workplan and on the OpenBao-backed event/mail delivery credentials.
The non-secret flex-auth runtime URL is live and verified, removing that item
from the rollout gate.
2026-08-13 delivery hardening: audit-core and email-connect are now live as
separately scoped receivers. `HTTPOutboxDeliveryAdapter` therefore accepts
distinct event and mail bearer tokens; runtime configuration uses
`USER_ENGINE_EVENT_TOKEN` and `USER_ENGINE_MAIL_TOKEN`, and mail delivery
fails closed when its dedicated token is absent. Tests assert that the two
Authorization headers differ. The full suite passes 132 tests with three
external-provider skips. Production rollout still waits on governed delivery
of both scoped credentials.