zooqueenandHanzo Dev e082d30dc4 Comments on the round-3 code state what it does, briefly. ...

Co-authored-by: Hanzo Dev <[email protected]>

2026-09-24 16:47:39 -07:00

..

agent_test.go

One machines collection, and pools read the address they are served on

2026-08-22 14:21:55 -07:00

authz_filter.go

Compute: the module, the binary and the image say so

2026-09-07 17:37:50 -07:00

authz_target_test.go

Read the target from the address, in one place

2026-08-22 11:39:56 -07:00

base.go

Comments on the round-3 code state what it does, briefly.

2026-09-24 16:47:39 -07:00

cors_test.go

visor is the multi-cloud path: no Kubernetes client at all

2026-08-05 19:07:11 -07:00

filter.go

Go 1.27.1, and the code it can say more simply

2026-09-16 19:27:30 -07:00

gone_rows.go

DigitalOcean, the direct mode and every stored provider key are gone: compute never has or stores a naked key (red round 3, H2).

2026-09-24 11:29:41 -07:00

gone_test.go

An asset and a provider are resources

2026-08-22 12:44:48 -07:00

gone.go

One place that says an address is gone

2026-08-22 12:21:22 -07:00

health_test.go

One machines collection, and pools read the address they are served on

2026-08-22 14:21:55 -07:00

health.go

Compute: the module, the binary and the image say so

2026-09-07 17:37:50 -07:00

main_test.go

Compute: the module, the binary and the image say so

2026-09-07 17:37:50 -07:00

nodes_test.go

DigitalOcean, the direct mode and every stored provider key are gone: compute never has or stores a naked key (red round 3, H2).

2026-09-24 11:29:41 -07:00

owned_test.go

A write's owner is checked once, against the org the request acts in, and its name comes from the address, or from the body only for a create; the ledger keeps an org's balance only while it cannot be read. Tests pin a body that names another org or row, a member of two orgs, the sweep's hold on the balance it reads, a gap in sweeps, and an oversized CloudWatch answer.

2026-09-24 12:00:49 -07:00

record.go

Compute: the module, the binary and the image say so

2026-09-07 17:37:50 -07:00

red3_test.go

The one platform privilege is acting in the admin org (IsSuperAdmin), in authorization and in the machine agent guard; an org admin and the built-in org are not platform-privileged. The service caller authenticates by Basic with this service's own client id, compared in constant time, never by a secret in the query string.

2026-09-24 11:54:40 -07:00

router_contract_test.go

DigitalOcean, the direct mode and every stored provider key are gone: compute never has or stores a naked key (red round 3, H2).

2026-09-24 11:29:41 -07:00

router.go

DigitalOcean, the direct mode and every stored provider key are gone: compute never has or stores a naked key (red round 3, H2).

2026-09-24 11:29:41 -07:00

tenant_context_filter_test.go

Compute: the module, the binary and the image say so

2026-09-07 17:37:50 -07:00

tenant_context_filter.go

Compute: the module, the binary and the image say so

2026-09-07 17:37:50 -07:00