Normalize key-id case in the API-key verifier generation guard (R21-G13) #173
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
The
CachingApiKeyVerifiergeneration guard depends on key-id case. Latent only.Source:
archreview/2026-10-21/remediation/00-tracking.mdrow R21-G13Next step (from the tracker): Normalize the key id (ordinal-ignore-case) at the guard and add a test.
Current-state evidence: the row is still
Open/Deferredin the latest (2026-10-21) tracker, and a code check on localmain@8c0a51d(2026-11-06) found it still present unless noted below.