Repository navigation

Add isolated OIDC admission and runtime credit allowances - #70429

Merged

pelikhan merged 22 commits into

mainfrom

pelikhan-stunning-doodle

Oct 20, 2026

Merged

Add isolated OIDC admission and runtime credit allowances#70429
pelikhan merged 22 commits into
mainfrom
pelikhan-stunning-doodle

Commits on Oct 20, 2026
- feat: add activation-only OIDC admission
  
  pelikhan
  and
  Copilot
  committed
  9c76a5b
- fix: initialize admission globals and send workflow hash
  
  pelikhan
  and
  Copilot
  committed
  a3a392a
- fix: keep admission generation unconditional
  
  pelikhan
  and
  Copilot
  committed
  3823a73
- refactor: reuse shared retries for activation admission
  
  pelikhan
  and
  Copilot
  committed
  72f65d9
- refactor: centralize admission timeouts in withRetry
  
  pelikhan
  and
  Copilot
  committed
  5b5934f
- docs(adr): add draft ADR-70429 for activation-only OIDC admission runtime
  github-actions[bot]
  authored
  82b3ac3
- feat: enforce admission allowances and report redacted decisions
  
  pelikhan
  and
  Copilot
  committed
  a878d37
- Merge concurrent admission ADR
  
  pelikhan
  and
  Copilot
  committed
  8fd6172
- docs: align admission ADR with runtime allowance enforcement
  
  pelikhan
  and
  Copilot
  committed
  534c41f
- Refactor admission activation preamble
  
  Copilot
  and
  pelikhan
  authored
  d8b2d38
- feat: record admission allowances in unified sessions
  
  pelikhan
  and
  Copilot
  committed
  2849229
- Address admission review feedback
  
  Copilot
  and
  pelikhan
  authored
  daedcb1
- Merge remote-tracking branch 'origin/main' into pelikhan-stunning-doodle
  Copilot
  authored
  b509869
- Isolate admission OIDC permissions
  
  Copilot
  and
  gh-aw-bot
  authored
  5cbb791
- Merge remote-tracking branch 'origin/main' into pelikhan-stunning-doodle
  Copilot
  authored
  fe6b457
- Isolate endpoint-gated admission and preserve fallback dependencies
  
  pelikhan
  and
  Copilot
  committed
  1a8681d
- Fix admission job regression tests
  
  Copilot
  and
  gh-aw-bot
  authored
  ac74ab3
- Merge concurrent admission work and preserve compiler-owned isolation
  
  pelikhan
  and
  Copilot
  committed
  1bbae0d
- Merge remote-tracking branch 'origin/pelikhan-stunning-doodle' into pelikhan-stunning-doodle
  pelikhan
  committed
  c7b0a39
- Merge admission regression coverage with isolated job naming
  
  pelikhan
  and
  Copilot
  committed
  fce9133
- Merge main and verify needs consistency
  
  pelikhan
  and
  Copilot
  committed
  4c052b6
- Add changeset
  github-actions[bot]
  authored
  50b891d

Commits

Commits on Oct 20, 2026