feat(security)!: secure-by-default requireAuth flip + RBAC gates for transfer/restore/purge (#2561 P0) - #2562

Merged

os-zhuang merged 4 commits into

mainfrom

claude/production-launch-priorities-ps8hk3

Jul 4, 2026

Commits on Jul 4, 2026

feat(security)!: secure-by-default requireAuth flip + RBAC gates for transfer/restore/purge (#2561 P0)
claude
committed
09ce072
docs: honesty caveats for pending transfer/restore/purge ops in permission docs
claude
committed
67554da
docs(adr): record FLS posture limitation + capability authoring-lint in ADR-0066 future refinements
claude
committed
8585975
fix(security): address self-review findings on the requireAuth flip + destructive-op gates
claude
committed
ff4957c