fix(security): bind copilot chat attachment keys to their owner - #6179

Merged

waleedlatif1 merged 5 commits into

fix/copilot-attachment-key-ownership

Aug 2, 2026

Commits on Aug 2, 2026

fix(security): bind copilot chat attachment keys to their owner
waleedlatif1
committed
6023670
fix(security): make the chat-upload ownership check atomic with its write
waleedlatif1
committed
bd7906a
fix(uploads): tolerate transient storage probes and reject unowned keys with 403
waleedlatif1
committed
760f07a
fix(security): compare-and-swap the chat binding on chat uploads
waleedlatif1
committed
d88c822
refactor(copilot): gate attachment tracking with the shared permission predicate
waleedlatif1
committed
175d608