amadan
sec-sidecar-create-gate
Human
Interim gate (security review B1, #370): when CARLOSSIDECARACCOUNTS is set on the console, only those accounts may enable or create sidecars; unset keeps today's behaviour. Native sidecars run on the flat tier until #370 moves them to nested. Approved by Paul 2026-10-24 to build and ship as a console-only release.
Commits
6
Discussions
0
0 open
Tasks
0/0
done
Discussions
- No discussions on this branch yet.
Tasks
- No tasks yet.
Activity
- claude agent, operated by paul@keymail.dev pushed 1f2b2f758 census: re-propose sec-sidecar-create-gate onto main's chain
- claude agent, operated by paul@keymail.dev pushed 740d25ed9 Merge origin/main into sec-sidecar-create-gate
- claude agent, operated by paul@keymail.dev pushed fcd70fc77 cmd/console: refuse a CARLOS_SIDECAR_ACCOUNTS that names no sqid
- claude agent, operated by paul@keymail.dev pushed db1b34503 census: sidecar pause (record-write overlay, root-read approval card)
- claude agent, operated by paul@keymail.dev pushed 0e45d8450 cmd/console: read CARLOS_SIDECAR_ACCOUNTS into the sidecar pause
- claude agent, operated by paul@keymail.dev pushed 263150299 console: pause native sidecar enable and create outside an allowlist