security: keep machine identity on delegated tokens and the required_relations gate (GHSA-vq29-8q3c-3hrm) - #789

Merged

lakhansamani merged 3 commits into

mainfrom

security/delegation-machine-identity

Sep 3, 2026

Commits on Sep 3, 2026

fix(security): keep machine identity on delegated tokens
lakhansamani
committed
408d5f1
test: pin chained machine-subject re-exchange behaviour change
lakhansamani
committed
1fe5679
fix(security): classify machine subjects on the required_relations gate
lakhansamani
committed
25458f0