fix(security): SCIM tombstone guard (prevent merged-account resurrection) + healthcheck scheme allow-list - #32

Closed

seonghobae wants to merge 14 commits into

mainfrom

claude/cwlab-pr-audit-governance-1hdcp5

Commits on Jul 29, 2026

fix(healthcheck): allow-list URL scheme and clear Semgrep dynamic-urllib finding
claude
committed
2fd34a9

Commits on Jul 30, 2026

fix(scim): refuse SCIM PUT that would resurrect a tombstoned merged duplicate
claude
committed
5e9c4eb

Commits on Jul 31, 2026

fix(merge): refuse explicit-link merge when the only tie is an unverified email
claude
committed
e95e87b
Revert "fix(merge): refuse explicit-link merge when the only tie is an unverified email"
claude
committed
4e2b9d2
fix(healthcheck): constrain redirect targets to HTTP(S), drop ftp/file handlers
claude
committed
ee085a3

Commits on Aug 3, 2026

test(security): reproduce SCIM merge tombstone race
seonghobae
committed
7342859
fix(security): add shared user-operation lock abstraction
seonghobae
committed
06abe3a
fix(security): serialize merge mutations with SCIM
seonghobae
committed
9375b4e
fix(security): make SCIM tombstone check and PUT atomic
seonghobae
committed
ce436a2
fix(security): wire one shared mutation lock manager
seonghobae
committed
ac3b056
test: inject shared user-operation locks into service fixtures
seonghobae
committed
5220bab
fix(api): surface user-operation lock contention as retryable
seonghobae
committed
3c4d098
test(security): verify shared lock serialization and timeout
seonghobae
committed
68ad2a1
docs: define SCIM and merge serialization invariant
seonghobae
committed
cbd283c