kami 8b4955a687 feat(federation): admission control on worker registration (S10) ...

Register() previously trusted a self-declared id and self-chosen token
from any caller, and let a second caller silently hijack an existing
worker id by re-registering it with a different token. Adds an optional
pre-shared AdmitToken (ORCHESTRA_FEDERATION_ADMIT_TOKEN) and requires a
same-id re-registration to present the existing worker's own token.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01W1rkJ2hBMybnJctPbcy4tT

2026-07-27 23:34:02 +04:00

cmd/orchestra

feat(federation): admission control on worker registration (S10)

2026-07-27 23:34:02 +04:00

deploy

feat(harness): dispatch /v1/harness/complete by harness kind (codex/opencode)

2026-07-27 23:31:10 +04:00

internal

feat(federation): admission control on worker registration (S10)

2026-07-27 23:34:02 +04:00

.gitignore

checkpoint: multi-repo Gitea ingestion, per-project repos, rotation anchor_sha fix

2026-07-27 18:15:02 +04:00

AGENTS.md

fix(herdr): B5 — replace invented pane.kill/release/rotation_signal with real methods

2026-07-27 21:05:53 +04:00

AUDIT.md

fix(store): TaskAmended applies description/priority/due, not just title (S7)

2026-07-27 23:26:24 +04:00

CLAUDE.md

fix(herdr): B5 — replace invented pane.kill/release/rotation_signal with real methods

2026-07-27 21:05:53 +04:00

go.mod

complete item 1 task substrate

2026-07-26 18:57:09 +04:00

orchestra-spec (1).md

complete item 1 task substrate

2026-07-26 18:57:09 +04:00

progress.md

feat(federation): admission control on worker registration (S10)

2026-07-27 23:34:02 +04:00

S

Description

No description provided

32 MiB