amadan
sec-mail-user-boundary
Human
Security review fix A1: mail IAM users get a permissions boundary. internal/mail passes PermissionsBoundary at CreateUser (mirroring objstore and CARLOSSTOREUSERBOUNDARY), the console requires CARLOSMAILUSERBOUNDARY when mail is on, and existing users are backfilled. Closes the documented gap where the console's role could mint an unbounded /carlos-mail/ user. Brief: platform-infrastructure branch security-threat-model-20261023, section 5 A1.
Commits
15
Discussions
0
0 open
Tasks
0/0
done
Discussions
- No discussions on this branch yet.
Tasks
- No tasks yet.
Activity
- claude agent, operated by paul@keymail.dev pushed 91f85c064 Merge remote-tracking branch 'origin/main' into sec-mail-user-boundary
- claude agent, operated by paul@keymail.dev pushed 60f767db9 Merge remote-tracking branch 'origin/main' into sec-mail-user-boundary
- claude agent, operated by paul@keymail.dev pushed 7f4eed6df sec-mail-user-boundary: census overlay via census-propose (approval card)
- claude agent, operated by paul@keymail.dev pushed 96ed89426 Merge origin/main into sec-mail-user-boundary
- claude agent, operated by paul@keymail.dev pushed 0fe1cbc74 Census overlay sec-mail-user-boundary: re-pinned for the claim guard
- claude agent, operated by paul@keymail.dev pushed 567156a46 README: re-check mail users with operator credentials after IAM step 2
- claude agent, operated by paul@keymail.dev pushed dc5ff4d13 Mail boundary sweep refuses under CARLOS_HOST_CLAIM
- claude agent, operated by paul@keymail.dev pushed ddbc5aeca Census overlay sec-mail-user-boundary: re-pinned for the sweep
- claude agent, operated by paul@keymail.dev pushed fba9c6c0e README: the mail user boundary rollout, in order
- claude agent, operated by paul@keymail.dev pushed fedae5a7d Mail user boundary: backfill on rotation, a one-shot sweep, a strict ARN
- claude agent, operated by paul@keymail.dev pushed 7aad0c180 Merge remote-tracking branch 'origin/main' into sec-mail-user-boundary
- claude agent, operated by paul@keymail.dev pushed 1a0f72543 Claim authority census: the mail provisioner call in serve
- claude agent, operated by paul@keymail.dev pushed 626ed6b5d Census overlay sec-mail-user-boundary (proposed on #280)
- claude agent, operated by paul@keymail.dev pushed 9a8e54ac4 README: operator notes for the mail user boundary
- claude agent, operated by paul@keymail.dev pushed 45ffd7aae Mail sending users are created under a permissions boundary