Repository navigation
chore(enterprise): bump submodule to e408a6f — AAuth inbound allow-list split (ent#623) - #3748
Merged
Merged
Conversation
…st split (ent#623) Pulls in Abilityai/trinity-enterprise#677. Without it the public a2a_gate seam (#2956) finds no inbound_identities method on the allow-list provider and refuses every AAuth caller, and an aauth: allow-list entry wrongly gates bearer callers. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
vybe
approved these changes
Oct 15, 2026
vybe
left a comment
vybe
left a comment
Contributor
There was a problem hiding this comment.
Lane A pin bump, fast-forward of one reviewed commit (ent#677). Validated locally.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Moves the
src/backend/enterprisepin from6501fb1toe408a6f, the current enterprisemaintip. It is a fast-forward of one commit: abilityai/trinity-enterprise#677.That commit is the private half of the AAuth prototype whose public half (#2956) is already on
dev. Until this pin moves:a2a_gate.explicit_inbound_identitiesfinds noinbound_identitiesmethod on the allow-list provider and refuses every AAuth caller (fail-closed by design).aauth:allow-list entry counts as a bearer entry, so listing an AAuth peer 403s every existing bearer caller on that agent.Test Plan
e408a6f: 25 passedtests/unit/test_ent623_aauth_a2a.pyondevwithe408a6fmounted: 31 passed6501fb1(one extra test passing)Related to abilityai/trinity-enterprise#623 (closed by #677).
🤖 Generated with Claude Code