feat(tenancy): resolve tenants by host, provision them, seed two - #15

Merged

cemililik merged 55 commits into

mainfrom

Sep 4, 2026

Commits on Sep 1, 2026

docs: correct the corpus Packet 7 implements against

cemililik
and
claude
committed
f8e0aa6
docs: close what the Packet 7 corpus review found

cemililik
and
claude
committed
53a9a17
docs: name the phase that can actually carry app.scope

cemililik
and
claude
committed
a487e83
feat(kernel): type the tenant context's identifiers

cemililik
and
claude
committed
54a275e
fix(kernel): pin the typed-id conversion where nothing was watching

cemililik
and
claude
committed
a6ac128
test(kernel): kill the mutants the typed-id guards had left alive

cemililik
and
claude
committed
06c22aa
feat(tenancy): the marker attributes and the EF query filters

cemililik
and
claude
committed
076398a
fix(tenancy): give the self-keyed class its filter, and the rules teeth

cemililik
and
claude
committed
e3483a6
fix(tenancy): let the query filters follow the ambient tenant

cemililik
and
claude
committed
9612acd
fix(tenancy): close the rest of what the Step 3 review reached

cemililik
and
claude
committed
4af3317
fix(tenancy): close the Step 3 Sonnet round

cemililik
and
claude
committed
40372db
feat(tenancy): host resolution and classification

cemililik
and
claude
committed
4ab91bf
fix(tenancy): close the two blockers the Step 4 review measured

cemililik
and
claude
committed
f437443

Commits on Sep 2, 2026

test(tenancy): make the Step 4 guards fail without the code they cover

cemililik
and
claude
committed
f25ad49
feat(tenancy): build the tenant context from the reconciliation matrix

cemililik
and
claude
committed
0a7b567
fix(tenancy): correct the context edge the Step 5 review measured

cemililik
and
claude
committed
6c4dff9
docs(tenancy): correct what the factory covers; pin what nothing held

cemililik
and
claude
committed
9df48d6
feat(tenancy): enforce the authority ceiling at pipeline step 4

cemililik
and
claude
committed
4b5a610
fix(tenancy): sweep the code the markers will live in

cemililik
and
claude
committed
ae16181
docs(tenancy): draw the line indistinguishability actually holds at

cemililik
and
claude
committed
1589eab
feat(tenancy): the one sanctioned path to a cross-tenant connection

cemililik
and
claude
committed
4d597a0
fix(tenancy): always return the bypass connection; fence a spent handle

cemililik
and
claude
committed
ba12b05
fix(tenancy): close the credential read the rules could not see

cemililik
and
claude
committed
a41853e
feat(tenancy): make an unannounced transaction fail loudly

cemililik
and
claude
committed
eb64b47
fix(tenancy): count the setters, and guard the arms nothing reached

cemililik
and
claude
committed
ca50a28
fix(tenancy): assert the guard's let-through half; correct Amendment 5

cemililik
and
claude
committed
fad94b2

Commits on Sep 3, 2026

feat(tenancy): let a provisioning request announce the tenant it creates

cemililik
and
claude
committed
36db879
feat(tenancy): settle the aggregate boundary Packet 6 left open

cemililik
and
claude
committed
d29cc84
feat(tenancy): provision a tenant and its default organization

cemililik
and
claude
committed
12866b2
docs(tenancy): correct provisioning's shape and the rule that guards it

cemililik
and
claude
committed
4ac783f
docs(tenancy): correct what refuses a zeroed provisioning actor

cemililik
and
claude
committed
31c28a6
fix(tenancy): answer a refused provisioning instead of crashing on it

cemililik
and
claude
committed
60a3e0f
fix(tenancy): keep a provisioning conflict a 409 through the status map

cemililik
and
claude
committed
91db848
feat(tenancy): seed two demo tenants through the real command path

cemililik
and
claude
committed
1646d72
fix(tenancy): make the seed reachable, checked, and answerable

cemililik
and
claude
committed
24260ea
fix(tenancy): stop the seeder reading a refusal as "already seeded"

cemililik
and
claude
committed
b8f723f
test(tenancy): run the five isolation cases through a real request

cemililik
and
claude
committed
4182f13
fix(tenancy): make the isolation cases assert what their names claim

cemililik
and
claude
committed
af705d9
fix(kernel): keep ADR-0037's promise and prove the reset case

cemililik
and
claude
committed
f1f6314
docs(roadmap): close Packet 7 with the record of what it got wrong

cemililik
and
claude
committed
e1ed969
fix(security): close three credential and transaction gaps

cemililik
and
claude
committed
150784a
docs(decisions): put three ADR edits back inside their own rules

cemililik
and
claude
committed
da0a029
fix(tenancy): read the trust bit and refuse unassigned ids

cemililik
and
claude
committed
019d057
fix(tenancy): verify a conflict is ours; default the first locale

cemililik
and
claude
committed
03dbf0f
docs: stop four documents claiming more than the code does

cemililik
and
claude
committed
6172a8b
fix(tenancy): detach what the database refused; bound the flights

cemililik
and
claude
committed
1367800
fix(tenancy): promote a default locale in the order the index requires

cemililik
and
claude
committed
44b2c9e
fix(tenancy): invalidate the answer that matters; follow live majors

cemililik
and
claude
committed
cd15f22
docs: correct three statements the code contradicts

cemililik
and
claude
committed
97fabdd
build(hooks): check the commit subject before CI has to

cemililik
and
claude
committed
6c0551d
fix(tenancy): refuse a default nobody serves; close two rule escapes

cemililik
and
claude
committed
55577bf
test(kernel): pin pipeline idempotency; drain both pipes before waiting

cemililik
and
claude
committed
cf20155
chore(tests): drop two dependencies nothing referenced, correct two docs

cemililik
and
claude
committed
27740d4
fix(database): keep an org-scoped session out of tenant-wide rows

cemililik
and
claude
committed
b6f32c4
docs(kernel): name the two idempotency limits that do not bound memory

cemililik
and
claude
committed
4ef2e17