Activation E2E: trusted CAPPO request preparation - #57

Merged

reprewindai-dev merged 11 commits into

mainfrom

activation-e2e-authority-binding

Sep 7, 2026

Commits on Aug 30, 2026

feat: bind CAPPO request signatures to authority headers
reprewindai-dev
committed
128fd65
feat: prepare signed CAPPO execution envelopes
reprewindai-dev
committed
6093ce2
feat: expose protected CAPPO request preparation
reprewindai-dev
committed
f12d0f6
fix: match CAPPO semantic envelope contract
reprewindai-dev
committed
c4536cd
Add authenticated internal CAPPO request preparer
reprewindai-dev
committed
f82ecb0
Test trusted CAPPO request preparation
reprewindai-dev
committed
a900264
test: verify hardened RFC 9421 trust-header signature base
reprewindai-dev
committed
5e5a28f
security: remove duplicate admin-token CAPPO signer surface
reprewindai-dev
committed
ce3d060
config: document CAPPO signer key alignment
reprewindai-dev
committed
5b7489b
security: reject noncanonical snapshot signatures
reprewindai-dev
committed
9e7d2f5
test: deterministically tamper snapshot signature bytes
reprewindai-dev
committed
5cab744