Aurélien Sibiril 33119f9306
Scope PGCheckpointer queries by tenant GID ...
Each Save and Load now derives tenant_id from the run GID and pins it
in the WHERE clause. A caller that supplies an ID from another tenant
fails closed instead of silently reading or overwriting cross-tenant
checkpoint data. Also rejects oversize checkpoints on load as a
read-side guard against a tampered or migrated row exceeding
MaxCheckpointBytes.
Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com >
2026-04-26 22:58:21 +02:00
2026-04-22 11:15:48 +02:00
2026-04-26 22:58:21 +02:00
2026-04-26 22:58:21 +02:00
2026-03-25 17:38:32 +01:00
2026-03-25 17:38:32 +01:00
2026-03-25 17:38:32 +01:00
2026-04-24 16:06:35 +02:00
2026-04-24 16:05:11 +02:00
2026-04-22 19:02:22 +02:00
2026-04-24 08:43:14 +02:00
2026-04-22 11:15:48 +02:00
2026-04-24 18:48:40 +04:00
2026-04-26 22:58:21 +02:00
2026-04-19 12:00:53 +02:00
2026-04-23 20:50:25 +02:00
2026-04-13 12:25:42 +02:00
2026-03-31 13:31:30 +02:00
2026-04-03 11:56:06 +02:00
2026-03-26 17:34:04 +01:00
2026-03-31 19:16:56 +04:00
2026-04-19 12:00:53 +02:00
2026-03-25 17:38:32 +01:00
2026-04-23 10:45:48 +02:00
2026-04-26 22:58:21 +02:00
2026-03-25 17:38:32 +01:00
2026-04-13 12:25:42 +02:00
2026-04-13 12:25:42 +02:00
2026-04-19 12:00:53 +02:00
2026-03-25 17:38:32 +01:00
2026-04-23 20:50:25 +02:00
2026-04-26 22:58:21 +02:00
2026-04-24 08:43:14 +02:00
2026-04-09 14:47:48 +04:00
2026-04-02 14:37:29 +02:00
2026-03-31 10:51:34 +02:00
2026-04-20 09:46:44 +02:00
2026-04-20 09:46:44 +02:00
2026-04-24 18:48:40 +04:00
2026-04-13 19:24:46 +02:00
2026-03-25 17:38:32 +01:00
2026-04-20 09:46:44 +02:00
2026-04-23 20:50:25 +02:00
2026-04-19 12:00:53 +02:00
2026-04-24 12:18:10 +04:00
2026-03-25 17:38:32 +01:00
2026-04-24 08:43:14 +02:00
2026-04-20 15:37:39 +02:00
33119f9306