Repository navigation

sql: enforce delegated table, column and read-only caveats (SQLite) - #425

Merged

samgbafa merged 7 commits into

mainfrom

tc1791/delegated-sql-caveats-sqlite

Oct 23, 2026

Merged

sql: enforce delegated table, column and read-only caveats (SQLite)#425
samgbafa merged 7 commits into
mainfrom
tc1791/delegated-sql-caveats-sqlite

Commits on Oct 23, 2026
- sql: accept delegated table, column and read-only caveats on delegation (behind a setting)
  tc1791a builder
  committed
  3854d11
- sql: judge table, column and read-only caveats in the authorizer and name the arm
  tc1791a builder
  committed
  a5ef5f5
- sql: judge a request by the caveats of every stored delegation on its chain
  tc1791a builder
  committed
  251828c
- sql: route-level tests, docs page and changelog for delegated caveats
  tc1791a builder
  committed
  335ea11
- Merge remote-tracking branch 'origin/main' into tc1791/delegated-sql-caveats-sqlite
  tc1791a builder
  committed
  278a3a7
- sql: read delegated caveats on stored rows only with the setting on; document refusals
  tc1791a builder
  committed
  bd03e32
- sql: judge DDL against the table it names; refuse PRAGMA checks and header values under a limit
  tc1791a builder
  committed
  714f10f