All pull requests

Pull requests

• fix(auth): prevent self-issued API keys from escalating scopes (#313)

  #347·chitcommit opened Oct 12, 2026Contributor·

  ·
  17

• feat(mercury): durable Workflow admission after broker-verified provider events (#344)

  #346·chitcommit opened Oct 12, 2026Contributor·

  ·
  1

• fix(connect): enforce agent prompt consumer gates and seed storage context

  #337·chitcommit opened Oct 9, 2026Contributor·

  ·
  6

• feat(github): private idempotent GitHub App issue broker

  #324·chitcommit opened Sep 22, 2026Contributor·

  ·
  1

  18

• fix(auth): gate GET /api/secrets/:name with the standard broker auth guard

  #310·chitcommit opened Sep 18, 2026Contributor·4 tasks done·

  ·
  4

• fix(security): make gitleaks actually run, and actually match

  #309·chitcommit opened Sep 18, 2026Contributor·

  ·
  12

• fix(chittyid): mint against the canonical contract and fail closed

  #305·chitcommit opened Sep 17, 2026Contributor·

  ·
  7

• fix(observability): adopt the ratified block — coarse enabled:true has no sampling ceiling

  #298·chitcommit opened Sep 8, 2026Contributor·

  ·
  4

• fix(credentials): fail closed on plaintext credential-reveal routes

  #271·chitcommit opened Jul 25, 2026Contributor·

  ·
  8

• fix(deploy): migrate off deprecated Cloudflare service environments

  #269·chitcommit opened Jul 25, 2026Contributor·

  ·
  10

• fix(deploy): recognise ai_search_namespaces + browser bindings in the extractor (salvaged from #265)

  #267·chitcommit opened Jul 25, 2026Contributor·

  ·
  6

• fix(security): remove unsafe ledger append endpoint

  #266·chitcommit opened Jul 25, 2026Contributor·

  ·
  3

• chore(deps): bump the npm_and_yarn group across 2 directories with 7 updates

  dependenciesjavascript
  #259·dependabot[bot] opened Jun 18, 2026Bot·

  ·
  2

• fix(neon-auth): 020 — FORCE RLS + complete write policies (split from #245)

  access-revieweddocs-approvedsecurity-approved
  #256·chitcommit opened Jun 16, 2026Contributor·

  ·
  7

• feat(github): governed internal merge-pr connection action (inert consumer)

  #253·chitcommit opened Jun 14, 2026Contributor·

  ·
  10

• feat(queue): connection-only GH event hand-off to chittyagent-dispatch [INERT]

  #252·chitcommit opened Jun 14, 2026Contributor·

  ·
  7

• fix(google): shared-drive params on Drive v3 proxy (Bug 2)

  access-revieweddocs-approvedsecurity-approved
  #251·chitcommit opened Jun 14, 2026Contributor·

  ·
  10

• feat(mcp-portal): MCPPortalProjection workflow + build-event handler (D2, default-OFF)

  #248·chitcommit opened Jun 12, 2026Contributor·

  ·
  29

• hotfix(neon-auth): 020 — enable RLS on all 9 neon_auth tables (prod regression from PR #241)

  #245·chitcommit opened Jun 10, 2026Contributor·4 tasks·

  ·
  18

• feat(broker): implement capabilities + policy + ledger primitives (5/7, signing deferred to #228)

  #240·chitcommit opened Jun 4, 2026Contributor·4 of 7 tasks·

  ·
  3

  41

• feat(courtlistener): add /api/proxy/courtlistener proxy for ChittyCounsel

  access-revieweddocs-approvedsecurity-approved
  #234·chitcommit opened Jun 4, 2026Contributor·5 of 8 tasks·

  ·
  38

• fix(C6): remove MCP aggregator; slim connect.chitty.cc/mcp (closes #190)

  #196·chitcommit opened May 22, 2026Contributor·3 tasks·

  ·
  1

  9

• [draft] smoke: 1P SDK eval — MCP profiles, VM token injection, chittyauth OAuth metadata

  #188·chitcommit opened May 11, 2026Contributor·3 tasks·

  ·
  2