Contribution records credited to Bordeaux Metropole

Audit Trail

• A private-file request that core refuses is recorded as a completed download
  Tue, 09/15/2026 - 17:38
• The status report names the chain and the row twice on a broken chain
  Tue, 09/15/2026 - 14:09
• Rebuilding the segment index from the chain, and acknowledging what it cannot rebuild
  Tue, 09/15/2026 - 13:48
• Correct the surfaces that describe an API and a signature coverage the code does not have
  Tue, 09/15/2026 - 11:47
• Move the segment attestations out of the verifier into their own class
  Tue, 09/15/2026 - 09:57
• Verification depth is a boolean, so an unresolvable secret reads as a forged signature
  Tue, 09/15/2026 - 07:44
• The segment table is an index the chain can rebuild, and nothing treats it as one
  Mon, 09/14/2026 - 18:17
• Two lifecycle diagnostics land in the chain they are reporting on
  Mon, 09/14/2026 - 13:18
• Correct the security documentation for the mechanisms the code no longer has
  Mon, 09/14/2026 - 12:15
• Report every site default a chain overrides, not the four the summary knows
  Mon, 09/14/2026 - 10:38
• A deactivated chain keeps being written to: hold its channel and skip it in the TSA cron
  Mon, 09/14/2026 - 09:00
• Retention turns a broken chain into a verified one: mark the range instead of losing the finding
  Sun, 09/13/2026 - 17:50
• Make the acknowledgment table an index the chain can rebuild
  Sun, 09/13/2026 - 12:55
• Forbid overlapping segments, instead of repairing what they break
  Sat, 09/12/2026 - 23:17
• Refuse an archive whose footer is missing the fields the import reads off it
  Sat, 09/12/2026 - 21:47
• Drop the three answers to questions something else already answers
  Sat, 09/12/2026 - 21:16
• Throttle checkpoints on the rows a chain gained, not on the ids it spans
  Sat, 09/12/2026 - 21:12
• Preserve a value the writer had to cut, so a signed row stops naming something the caller never sent
  Sat, 09/12/2026 - 16:25
• Move the acknowledgment store out of the chain verifier
  Sat, 09/12/2026 - 14:30
• Name the admin surfaces the module actually has, and let core announce its own warning
  Sat, 09/12/2026 - 14:07
• Parse an ISO duration in one place, order the thresholds by one set of rules, and count the units the preview renders
  Sat, 09/12/2026 - 12:06
• Diff a multi-value field by counting its items, and draw each one where the field holds it
  Fri, 09/11/2026 - 21:58
• Move the canonical JSON encoder out of the chain verifier
  Fri, 09/11/2026 - 19:40
• Keep a chain write inside the columns it has, the shape it signs, and the budget a page can spend
  Fri, 09/11/2026 - 16:43
• Record what an acknowledgment does to the chain, keep its operator in the erasable tier, and re-check a signing Key whose bytes moved
  Fri, 09/11/2026 - 14:41
• Give every method a verb that names what it does, and stop calling a filtered event rejected
  Thu, 09/10/2026 - 17:48
• Correct the statements the code contradicts, and let the confirm button name the operation
  Thu, 09/10/2026 - 13:27
• Give the two implemented entries filters their fields and their chips
  Thu, 09/10/2026 - 12:04
• Keep an archive file unreadable by the host, and serve it only to whoever may administer the trail
  Thu, 09/10/2026 - 09:12
• Refuse, re-read and lock the five chain states the module documents and does not survive
  Thu, 09/10/2026 - 08:02
• Claim one nested context key, so a foreign log context cannot suppress or forge part of an audit row
  Wed, 09/09/2026 - 16:08
• Keep the module's own diagnostics out of the chain they report on
  Wed, 09/09/2026 - 14:09
• Name the signing role instead of competing status adjectives, and let the command line set which secret signs
  Wed, 09/09/2026 - 13:32
• Report stale filter plugins, stop reporting a failed key copy as success, and correct the contracts describing removed behavior
  Wed, 09/09/2026 - 12:48
• Guard the acknowledgment edit path, answer the verifier's per-row questions once per walk, and stop storing unbounded verdicts
  Wed, 09/09/2026 - 10:33
• Refuse to sign an archive whose bytes did not all reach the file, and identify an archived row by the id it carries
  Wed, 09/09/2026 - 09:19
• Mark the config types FullyValidatable, constrain what the keys promise, and make the settings forms validate against them
  Tue, 09/08/2026 - 20:40
• Put the demo seed where PHPStan looks, stop the metrics job asserting on its own output, and offer the redaction lists a write actually uses
  Tue, 09/08/2026 - 18:18
• Redact URL-borne secrets from the request URI and the referer before they are recorded
  Tue, 09/08/2026 - 17:03
• Let a caller supply the outbox buffer, so the flush failure path can be tested
  Tue, 09/08/2026 - 13:23
• Correct the documentation the code contradicts, starting with the Drupal 12 claim, and declare the project a shipped submodule needs
  Tue, 09/08/2026 - 11:46
• Record the refused logins and reset requests, diff a translation against its own language, and correct the forensic precedence
  Tue, 09/08/2026 - 10:23
• Ask the chain's filters on both paths, report the drops that were silent, and give the chain key one meaning per value
  Tue, 09/08/2026 - 07:02
• Bound the attempts a staged write gets, so one entry stops blocking the rest
  Mon, 09/07/2026 - 16:23
• Run the test that never ran, and cover the two paths the suite claimed
  Mon, 09/07/2026 - 15:37
• Validate an archive against its own signed anchors on import, and stop the missing-secret waiver covering a mismatch
  Mon, 09/07/2026 - 15:04
• Compute the per-row verdict in one place, and stop the surfaces disagreeing with the walk
  Mon, 09/07/2026 - 13:48
• Set validation errors in validateForm, and stop the chain form promising a delete it does not do
  Mon, 09/07/2026 - 09:00
• Refuse to reissue a freed tsa_id, so a stored timestamp keeps naming the TSA that issued it
  Mon, 09/07/2026 - 07:28
• Refuse to reissue a freed secret_id, and stop a key edit turning an intact trail into a tamper verdict
  Sun, 09/06/2026 - 21:12