giles 8e0f06aa28 H1: HMAC-gate internal endpoints /ticket /order /person (TDD) ...

Failing tests first (4 red: unsigned POSTs returned 200 and minted objects), then the gate:
host/blog--int-verify? checks x-int-sig = sess-sig(fed-secret, request TARGET) (params live in the
query, body is empty); host/blog--protect-internal wraps the three routes → 403 unsigned. Secret
unset = open (dev/tests). Callers (events→shop /ticket + /order, shop→identity /person) sign via
host/blog--int-headers. Closes the live capacity-bypass (anyone could mint tickets directly).

blog suite 225/225 (218 + 7 new).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-03 10:07:40 +00:00

..

behavior.sx

host: correct the seam's async-completion contract + prove it (2nd review)

2026-07-02 13:55:32 +00:00

blog.sx

H1: HMAC-gate internal endpoints /ticket /order /person (TDD)

2026-07-03 10:07:40 +00:00

compose.sx

host: polish — a third fold domain (deps) + a live execute-fold demo (/workflow-demo)

2026-07-01 05:16:56 +00:00

execute.sx

host: execute-fold — universality proven with a second fold (composition step 7)

2026-06-30 23:49:41 +00:00

feed.sx

host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

2026-06-30 11:07:30 +00:00

flows.sx

host P0.2: publish-DAG + execute-fold runner + capability check (hypothesis confirmed)

2026-07-02 14:18:08 +00:00

handler.sx

host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

2026-06-30 11:07:30 +00:00

htmlsx.sx

host: SX-native HTML→SX converter (the radar migrator) + first-class HTML import

2026-07-01 15:32:06 +00:00

ledger.sx

host: blog published-post read endpoint GET /<slug>/ -> HTML, 156/156

2026-06-19 18:08:12 +00:00

middleware.sx

host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

2026-06-30 11:07:30 +00:00

otel.sx

otel: robust SPA poll — stable #otel-body polls /otel/fragment (innerHTML)

2026-07-01 20:48:15 +00:00

page.sx

host: Phase 5.1 — interactive SX-page render from a handler, 181/181

2026-06-19 20:11:49 +00:00

ra.sx

host RA: the Erlang durable runner adapter — built + tested (module + integration)

2026-07-02 16:20:36 +00:00

relations.sx

host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

2026-06-30 11:07:30 +00:00

router.sx

host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

2026-06-30 11:07:30 +00:00

server.sx

host: live wiring — native http-listen <-> Dream bridge + serve.sh, 145/145

2026-06-19 17:41:58 +00:00

session.sx

host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

2026-06-30 11:07:30 +00:00

sxtp.sx

sxtp: patch + signals primitives (Datastar-borrowed)

2026-06-30 15:22:37 +00:00

ta.sx

host TA: the fed-sx transport adapter — federation loop proven at the seam

2026-07-02 16:48:30 +00:00