3d1b86b451
fix(acl): authorize scripted alarm commands at their owning equipment's scope ( #797 )
...
Scripted condition NodeIds are opaque ScriptedAlarmIds, so splitting them as a
topology path could never match an Equipment grant: a narrow equipment grant was
denied while a Cluster grant passed.
- OtOpcUaNodeManager binds each LIVE scripted condition instance to the
EquipmentId it was materialised under (only when it hangs under that folder);
dropped on remove / drop-recreate / equipment-subtree removal / rebuild; a
same-id re-materialise under another equipment re-parents and re-binds.
- DataPlaneAuthoritySnapshot carries EquipmentScopePaths (EquipmentId ->
[uns, Area, Line, Equipment]) decoded from the artifact by the same
AclScopePathResolver call that plants Equipment grants.
- DataPlaneAuthorizer.AuthorizeScriptedCondition re-reads key, grant and
generation per call (uncached) and evaluates at the owner path; unbound,
replaced or unplaceable owners deny under every grant. No id-split or
realm-root fallback.
- Native conditions (RawPath) and the ACL-off role gate are unchanged.
NodeIds and AlarmCommand.AlarmId are unchanged.
Sdk2OpaqueScriptedScopeBaselineTests deliberately flipped: it pinned the denial
and now pins owner-grant allow / sibling deny / cluster allow. Follow-up #808
(folder ids + Server-object event visibility for narrow UNS grants).
2026-11-10 21:23:57 -05:00
dohertj2
b36e688f0a
Merge pull request 'Upgrade OPC UA SDK to 2.0.1 preserving application contracts' ( #802 ) from codex/opcua-sdk-2 into master
...
v2-ci / unit-tests (push) Waiting to run
Merge OPC UA SDK 2.0.1 upgrade (#802 )
2026-11-10 20:30:49 -05:00
da4e27003e
docs: record completed Linux OPC UA lifecycle diagnostic
v2-ci / unit-tests (pull_request) Waiting to run
2026-11-10 20:28:11 -05:00
1e4b017f6e
docs: retain verified Linux rehearsal and diagnostic gate
v2-ci / unit-tests (pull_request) Failing after 1h6m11s
2026-11-10 18:25:37 -05:00
b18f97236a
docs: record reviewed private temp mount controls
v2-ci / unit-tests (pull_request) Has been cancelled
2026-11-10 18:18:59 -05:00
681e1c1a9b
fix: bind private temp storage for read-only late-slope runs
2026-11-10 18:18:59 -05:00
351edb0a86
docs: retain read-only Linux rehearsal startup failure
2026-11-10 18:13:00 -05:00
626cb4f7f1
docs: record final late-slope controls before artifact preparation
v2-ci / unit-tests (pull_request) Has been cancelled
2026-11-10 18:03:13 -05:00
6591cf1a05
docs: prepare private native retention handoff
2026-11-10 18:03:13 -05:00
d8a6959bcf
test: verify the mapped CLR inode in late-slope diagnostics
2026-11-10 18:02:33 -05:00
f4054f6201
test: enforce late-slope restart and shutdown deadlines
2026-11-10 18:01:41 -05:00
613369fc54
test: add immutable Linux late-slope diagnostic tooling
2026-11-10 17:59:55 -05:00
7023285a3e
docs: retain late-slope guard control receipts
2026-11-10 17:54:43 -05:00
cfd3cdcd13
test: compare native keychain deletion timing
2026-11-10 17:52:51 -05:00
7f21c9aa64
test: capture the preserved late-slope assertion explicitly
2026-11-10 17:50:55 -05:00
5ea6a23f1b
test: implement fixed Linux late-slope diagnostic mode
2026-11-10 17:47:31 -05:00
fbf73436be
docs: record reviewed native import reproduction
v2-ci / unit-tests (pull_request) Waiting to run
2026-11-10 17:42:40 -05:00
1298ecc194
test: reproduce native import retention without managed caller
2026-11-10 17:42:23 -05:00
041189aa6d
docs: close SDK2 ownership evidence review
v2-ci / unit-tests (pull_request) Has been cancelled
2026-11-10 17:35:54 -05:00
327bbdaab9
docs: record reviewed SDK2 ownership regressions and diagnostic design
2026-11-10 17:33:06 -05:00
2e4905f112
test: record partial native bridge import control
2026-11-10 17:31:50 -05:00
ce21f5db09
Merge master SDK1 ownership repair with SDK2 disposal adaptation
2026-11-10 17:17:00 -05:00
2cf14f403b
test: verify SDK2 host disposal ownership and shared completion
2026-11-10 17:16:47 -05:00
19610c6812
fix: share SDK2 host disposal completion and close unadopted servers
2026-11-10 17:06:27 -05:00
58f8d57f5a
test: expose concurrent SDK2 host disposal completion race
2026-11-10 17:05:22 -05:00
efb9197a0f
docs: record reviewed SDK1 terminal disposal repair
v2-ci / unit-tests (push) Has been cancelled
2026-11-10 17:05:06 -05:00
69dcc431ec
test: record native Apple keychain negative control
2026-11-10 16:56:31 -05:00
10edc44f94
fix: terminally dispose SDK1 server ownership once
2026-11-10 16:53:34 -05:00
3e136d7367
test(opcua): distinguish baseline close semantics and terminal ownership
2026-11-10 16:51:36 -05:00
84bfe6cd20
test: cover SDK1 terminal server disposal ownership
2026-11-10 16:51:31 -05:00
2cf7c1d248
docs: locate close control build receipt
v2-ci / unit-tests (pull_request) Waiting to run
2026-11-10 16:40:28 -05:00
0c0209f9a6
docs: record reviewed close ownership and native attribution
2026-11-10 16:39:34 -05:00
af71fb11ba
test: isolate native certificate reload retention on macOS
2026-11-10 16:37:51 -05:00
564f109143
test: align abandoned continuation count across close controls
2026-11-10 16:36:29 -05:00
6737e367b4
test: pin closed authentication token rejection status
2026-11-10 16:33:09 -05:00
b5986c61d9
test: preserve bounded cleanup on close control failures
2026-11-10 16:31:05 -05:00
235196beb2
test: add bounded SDK2 close ownership controls
2026-11-10 16:26:26 -05:00
ed60970fc2
docs: record final review hold and baseline ownership limits
v2-ci / unit-tests (pull_request) Has been cancelled
2026-11-10 16:09:09 -05:00
10adbd57b6
test(opcua): preserve original canonical adapter partial ownership proof
2026-11-10 16:08:47 -05:00
331cde68a7
test: record final integrated CI baseline-only failures
v2-ci / unit-tests (pull_request) Has been cancelled
2026-11-10 16:05:13 -05:00
4a04806d22
test: preserve saturation outcome and classify final CI corrections
v2-ci / unit-tests (pull_request) Has been cancelled
2026-11-10 15:46:58 -05:00
75057d8c69
Merge remote-tracking branch 'origin/master' into codex/opcua-sdk-2
2026-11-10 15:26:39 -05:00
20ad56f3f4
test(runtime): await rebuild outcomes before asserting no-op
2026-11-10 15:22:49 -05:00
52d1373e81
test(runtime): await rebuild outcomes before asserting no-op
v2-ci / unit-tests (push) Waiting to run
2026-11-10 15:22:47 -05:00
04d5513af2
test(opcua): bind saturation artifacts to gateway 1.0 and module identities
v2-ci / unit-tests (pull_request) Has been cancelled
2026-11-10 15:03:21 -05:00
d7891372f2
test(opcua): prove saturation observer runtime event delivery
2026-11-10 14:55:46 -05:00
54a4ff2149
test(opcua): add fixed candidate saturation diagnosis with observer barriers
2026-11-10 14:55:46 -05:00
ab35ddd3c2
test: retain completed two-hour client lifecycle evidence
v2-ci / unit-tests (pull_request) Has been cancelled
2026-11-10 14:54:38 -05:00
c6c05a1001
test: record publish smoke with HistorianGateway 1.0 packages
2026-11-10 14:52:08 -05:00
f2a8ce1305
docs: record landed historian upgrade and support migrated replays
2026-11-10 14:44:30 -05:00
Joseph Doherty
dohertj2