Skip to content

fix: bind cohort restore to reviewed source runtime - #67

Merged
kaanyagci merged 1 commit into
codex/keycloak-2681-evidence-contractfrom
codex/keycloak-runtime-bound-restore
Oct 16, 2026
Merged

kaanyagci merged 1 commit into
codex/keycloak-2681-evidence-contractfrom
codex/keycloak-runtime-bound-restore

Conversation

@kaanyagci

@kaanyagci kaanyagci commented Oct 16, 2026 •

Copy link
Copy Markdown
Member

Resolve the reviewed image/version pair from the exact protected Keycloak checkout before backup capture, then bind provider build, isolated restores and canonical receipt to that pair. Reject missing, duplicate, unknown and mismatched pins. Retain exact SHA, five-database, private backup and evidence gates.

Validation: configuration validator, shell syntax, cohort contract tests and runtime selector regression tests passed. Both reviewed runtime versions remain supported.

@kaanyagci
kaanyagci added this pull request to stack #68 October 16, 2026 01:25
@kaanyagci
kaanyagci merged commit b25bef6 into main Oct 16, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant