fix(release): keyless subject uniqueness, NO_PROXY IPv6/CIDR, proxied boot secret, and remaining audit follow-ups by waleedlatif1 · Pull Request #9866 · simstudioai/sim

docs(api-keys): add rollback guidance to the api-key-read-only flag

waleedlatif1

committed

77fd840

docs(api): say v2 workflow execution needs a full-access API key

waleedlatif1

committed

27066b8

chore(api): regenerate MCP operations for the execute scope wording

waleedlatif1

committed

6ff0179

fix(hitl): stop duplicating input fields across listed pause points

waleedlatif1

committed

b9dc603

fix(api): refuse a personal v2 key with a missing owner as invalid, not a 500

waleedlatif1

committed

07d5c25

fix(credentials): refuse a keyless subject another live credential already holds

waleedlatif1

committed

1a8ef09

refactor(tools): detect the saved-credential picker with isSavedCredentialPicker

waleedlatif1

committed

88a8a85

fix(runtime-secrets): fetch the boot secret through the configured proxy

waleedlatif1

committed

d5d8547

fix(models): mark NVIDIA Nemotron 3 Super retired and move the NVIDIA default

waleedlatif1

committed

638b457

fix(credentials): lock keyless subject checks through the advisory-lock helper and refuse on unreadable siblings

waleedlatif1

committed

b96b952

fix(network): match NO_PROXY entries like curl, including bare IPv6 and CIDR

waleedlatif1

committed

76e8618

docs(network): note the boot secret fetch follows Bun's NO_PROXY rules

waleedlatif1

committed

aefa2e4

Navigation Menu

Repository navigation

fix(release): keyless subject uniqueness, NO_PROXY IPv6/CIDR, proxied boot secret, and remaining audit follow-ups - #9866

fix(release): keyless subject uniqueness, NO_PROXY IPv6/CIDR, proxied boot secret, and remaining audit follow-ups#9866
waleedlatif1 merged 16 commits into
stagingfrom
fix/release-audit-unique-1110

Commits on Nov 10, 2026

docs(api-keys): add rollback guidance to the api-key-read-only flag

docs(api): say v2 workflow execution needs a full-access API key

chore(api): regenerate MCP operations for the execute scope wording

fix(hitl): stop duplicating input fields across listed pause points

fix(api): refuse a personal v2 key with a missing owner as invalid, not a 500

fix(credentials): refuse a keyless subject another live credential already holds

refactor(tools): detect the saved-credential picker with isSavedCredentialPicker

fix(runtime-secrets): fetch the boot secret through the configured proxy

fix(models): mark NVIDIA Nemotron 3 Super retired and move the NVIDIA default

fix(credentials): lock keyless subject checks through the advisory-lock helper and refuse on unreadable siblings

fix(network): match NO_PROXY entries like curl, including bare IPv6 and CIDR

docs(network): note the boot secret fetch follows Bun's NO_PROXY rules

Commits on Nov 11, 2026

fix(credentials): decide subject reuse under the lock on every keyless reconnect

fix(runtime-secrets): pick the boot fetch's proxy with the app's rules

docs(api): state the credential and role a manual v2 run requires

Merge remote-tracking branch 'origin/staging' into fix/release-audit-unique-1110