zeekayandClaude Opus 5.5 f8eaf72607 A tightened rule reaches the database that already exists ...

Each Ensure creates its collection once and returns early ever after, so
the owner-scoped rules of v1.5.0 only ever applied to a fresh database.
One created by an earlier release kept list/view open to anyone on
accounts, balances, transactions, wallets and cards through every
upgrade.

The rules are now one table, used at creation and re-asserted on every
boot. The users collection's anonymous create is closed the same way:
identity is Lux ID, so no anonymous caller makes a users record.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_016dDw5Lp9sZFctwvZLn4nVz

2026-09-22 23:05:09 -07:00

..

accounts.go

A tightened rule reaches the database that already exists

2026-09-22 23:05:09 -07:00

audit.go

fix: bump Base v0.39.0 → v1.3.1 + pin explicit collection IDs

2026-05-27 17:49:24 -07:00

balances.go

every new account was created without a balance, and nothing said so

2026-08-25 12:57:09 -07:00

beneficiaries.go

A tightened rule reaches the database that already exists

2026-09-22 23:05:09 -07:00

cards.go

A tightened rule reaches the database that already exists

2026-09-22 23:05:09 -07:00

conversions.go

A tightened rule reaches the database that already exists

2026-09-22 23:05:09 -07:00

documents.go

A tightened rule reaches the database that already exists

2026-09-22 23:05:09 -07:00

ensure_test.go

Lux ID is the only way in

2026-08-26 15:16:53 -07:00

format_test.go

a notification says the amount a person sent, not the one that is stored

2026-08-27 07:33:38 -07:00

plans.go

say who holds the keys, on the screens where it matters

2026-08-26 16:33:49 -07:00

pricing_test.go

read prices through Source, and the catalogue separately from the tables

2026-08-28 16:00:37 -07:00

pricing.go

read prices through Source, and the catalogue separately from the tables

2026-08-28 16:00:37 -07:00

rules_test.go

A tightened rule reaches the database that already exists

2026-09-22 23:05:09 -07:00

rules.go

A tightened rule reaches the database that already exists

2026-09-22 23:05:09 -07:00

transactions.go

A tightened rule reaches the database that already exists

2026-09-22 23:05:09 -07:00

vaults.go

the ledger's units are types now, and the product mounts in two places

2026-08-25 13:32:29 -07:00

wallets.go

A tightened rule reaches the database that already exists

2026-09-22 23:05:09 -07:00