fix(security): ACL gate before privileged intercepts, fail-closed unknown users, real CLIENT KILL USER (c10k cluster B) - #430

Merged

TinDang97 merged 5 commits into

mainfrom

fix/c10k-acl-intercept-order

Aug 6, 2026

Commits on Aug 6, 2026

fix(security): run the ACL gate before every privileged intercept; deny unknown users; track post-AUTH identity (c10k B1/B2/B3)
TinDang97
committed
755b83b
fix(security): refuse the io_uring bridge when authentication is configured (c10k B4)
TinDang97
committed
3237f12
fix(tls): process TLS records before vetoing a task park (c10k B5)
TinDang97
committed
41edd91
test(acl): poke the connection before asserting a killed session is gone (Windows CI)
TinDang97
committed
1a93477
fix(acl): let a self-DELUSER answer before it disconnects the caller (#430 review)
TinDang97
committed
5374628