Repository navigation
docs(#137): PR A applied to production and proven live; public-grants required - #237
Merged
Merged
Conversation
…s flipped exactly, six policies gone, nothing else moved, definer functions and every refusal witnessed inside a rolled-back transaction; public-grants required Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
🛡️ Fixor Security ReportRepository:
🔒 Analyzed by Fixor · 2026-10-07T07:33:44.956Z |
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Records the step after PR #236's merge, in
docs/PROGRESS.mdSection 7 only: one block, additions only (0 deletions), directly below the preamble.Recorded: the apply of
20261007_public_grants_dead_writes_and_anon.sqlon production (07:23:50Z, "Success. No rows returned", file loaded from the merged commit and hash-checked against it); the live read after apply (149 lines, identical to the greenpublic-grantsfixture read except the two platform lines the audit already recorded: every one of the 25 grant lines flipped exactly, the six policies gone, all other policies hash-identical, every other section unchanged); the rolled-back proof block (definer functions write and read back as a role-switchedauthenticatedthrowaway account; every forbidden write asauthenticatedandanonanswers42501 permission denied for table;anoncalling the functions hits their ownnot authenticated; row counts identical before and after);public-grantsmade a required check after its first green run onmain, by one PATCH ofrequired_status_checkswith the five contexts andstrictunchanged; branch deleted.Deliberately not edited: row #137, per the brief (Section 7 additions only). Its "NOT BUILT" now holds for PR B and PR C only; the block says so and the row is rewritten when #137 closes. Rows 42, 69 and 81 untouched.
🤖 Generated with Claude Code