J3vbandClaude Fable 5 fb1afb8a8d fix(admin): owner gate answers 503 on a role read fault, not 403 (OC-0345) ...

ownerOnlyMiddleware collapsed `err != nil || role == nil` into 403 "role not
found", so a transient GetRoleByID failure told the Owner they lack the
Owner role. Split the outcomes: a store error logs and answers 503
SERVICE_UNAVAILABLE (the perimeter's contract); a genuinely missing role
still answers 403. The existing whitebox tests, which inject only the user
into the context, are unchanged.

Test: TestOwnerOnlyMiddleware_RoleLookupFailureIs503 (roles table renamed,
whitebox — through the full stack the perimeter would answer its own 503).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A17Uq3d2C36rN82Jitf3wo

2026-08-30 10:19:05 +02:00

..

admin

fix(admin): owner gate answers 503 on a role read fault, not 403 (OC-0345)

2026-08-30 10:19:05 +02:00

api

fix(api): panic log carries trace_id — tracing ahead of recoverer (OC-0346)

2026-08-30 10:13:04 +02:00

auth

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

cmd

feat(b3-0): boundary inventory — dbinventory tool, db-import-boundary rule, server-boundaries.md (#1448)

2026-08-29 20:07:15 +02:00

config

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

db

feat(b2-6): safe audit coverage (S-02) (#1441)

2026-08-29 11:11:37 +02:00

diskutil

infra: observability, backups, guardrails, and deployment hardening (#1376)

2026-08-15 20:50:47 +02:00

invariants

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

logctx

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

migrations

infra: observability, backups, guardrails, and deployment hardening (#1376)

2026-08-15 20:50:47 +02:00

permissions

feat(b2-5): one permission predicate per security property (#1440)

2026-08-29 07:07:04 +00:00

plugin

fix(b2-8): close the nine B2-tagged ledger findings (#1436)

2026-08-28 15:13:49 +00:00

scripts

chore(b2-0): release hygiene (#1434)

2026-08-28 10:16:27 +02:00

service

refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)

2026-08-30 09:49:05 +02:00

stackutil

feat(server): logging & error-visibility hardening

2026-07-24 11:07:12 +02:00

storage

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

syncutil

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

telemetry

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

updater

feat(b2-2): protocol epoch and negotiation (slim) (#1438)

2026-08-29 07:23:06 +02:00

ws

chore(bughunt): record the 2026-08-29 hunt in the findings ledger (#1442)

2026-08-29 10:27:36 +00:00

.air.toml

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

.dockerignore

B1-6: generated artifacts (RL-06 / L-06, RL-07 / L-07, RL-08 / L-08) (#1418)

2026-08-27 11:08:07 +02:00

.env.example

feat: add docker-compose with LiveKit for server Docker deployment

2026-04-03 14:32:20 +02:00

.golangci.yml

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

.gremlins.yaml

B1-3: repository hygiene gates (RL-19 / L-13, S-05) (#1414)

2026-08-26 18:00:26 +00:00

addrinuse_test.go

fix(server): drain fully before the self-update/restore restart handoff (#1380)

2026-08-16 08:25:40 +02:00

addrinuse_unix.go

fix(server): drain fully before the self-update/restore restart handoff (#1380)

2026-08-16 08:25:40 +02:00

addrinuse_windows.go

fix(server): drain fully before the self-update/restore restart handoff (#1380)

2026-08-16 08:25:40 +02:00

addrinuse.go

fix(server): drain fully before the self-update/restore restart handoff (#1380)

2026-08-16 08:25:40 +02:00

CLAUDE.md

feat(b3-0): boundary inventory — dbinventory tool, db-import-boundary rule, server-boundaries.md (#1448)

2026-08-29 20:07:15 +02:00

docker-compose.otel.yml

B1-3: repository hygiene gates (RL-19 / L-13, S-05) (#1414)

2026-08-26 18:00:26 +00:00

docker-compose.yml

B1-3: repository hygiene gates (RL-19 / L-13, S-05) (#1414)

2026-08-26 18:00:26 +00:00

Dockerfile

chore: merge main into dev after the v1.2.0-alpha.4 release (#1432)

2026-08-28 08:18:24 +02:00

go.mod

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

go.sum

build: toolchain and dependency upgrades (TypeScript 6, Node 24 CI, Vite 8, Vitest 4, Go/Rust deps) (#1401)

2026-08-22 06:48:58 +02:00

listen_retry.go

fix(server): drain fully before the self-update/restore restart handoff (#1380)

2026-08-16 08:25:40 +02:00

livekit.yaml.example

feat(server): support dual-homed voice hosts and user-managed livekit.yaml

2026-07-19 10:50:11 +00:00

main_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

main.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

Makefile

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

prometheus.dev.yml

B1-3: repository hygiene gates (RL-19 / L-13, S-05) (#1414)

2026-08-26 18:00:26 +00:00

restart_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

restart.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00

sqlc.version

feat: adopt sqlc for type-safe database access (Phase A Step 2)

2026-04-06 09:12:59 +02:00

sqlc.yaml

chore(server): delete unfinished Postgres scaffolding

2026-07-19 08:15:58 +02:00

token_cli.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)

2026-08-27 07:11:18 +02:00