Contribution records credited to Bordeaux Metropole

Personal Data Vault

• Take the metrics generator back to one version, and leave test files out of the architecture surface
  Sun, 09/20/2026 - 17:28
• Let the contract module own the vault-client service name, instead of two implementations overwriting it
  Sun, 09/20/2026 - 16:39
• Give the metrics page a check that can fail, and refresh the page nothing has re-measured since September
  Sun, 09/20/2026 - 15:54
• Columns that can only hold ASCII are declared as if they could hold anything, and three of them lead indexes
  Sat, 09/19/2026 - 09:57
• Keep the vault connection when a Key it names is deleted, and refuse deleting the handle encryption key
  Thu, 09/17/2026 - 11:50
• Follow audit_trail's write API rename: event() becomes record()
  Thu, 09/10/2026 - 18:03
• Lead method names with a verb, following Drupal core naming conventions
  Wed, 09/09/2026 - 13:30
• Name modules by their human name in operator-facing strings, not by machine name
  Tue, 09/08/2026 - 20:00
• Pre-alpha9 audit: complete the French translation, label the audit-trail events, fold the duplicated reapers, and remeasure the metrics
  Tue, 09/08/2026 - 17:45
• Follow Drupal core naming conventions, and patch key and webform so the Drupal 12 lane runs every test
  Tue, 09/08/2026 - 15:35
• Pre-alpha8 documentation sweep: record the release, correct the supported core range, and refresh the metrics snapshot
  Sun, 09/06/2026 - 19:50
• Test the Drupal 12 lane against patched dependencies instead of skipping eighteen classes
  Sun, 09/06/2026 - 18:20
• Pre-alpha8 audit: load pdv_vault's French, resync the translations, announce the disabled rotation control
  Sat, 09/05/2026 - 21:55
• Commit transactions explicitly instead of letting them go out of scope
  Sat, 09/05/2026 - 18:45
• Ship a phpstan.neon and raise static analysis to level 3
  Sat, 09/05/2026 - 15:50
• Pre-release audit: fix a latent fatal in the item delete form and a French string that never rendered, drop the changelog, and script the translation check and the metrics page
  Tue, 09/01/2026 - 21:22
• Register the audit-event test listeners through one trait instead of eight by hand
  Sun, 08/30/2026 - 21:00
• Raise static analysis to level 5, and fix the consumer console forms that pass the wrong service
  Sun, 08/30/2026 - 19:58
• Give each duplicated concept one owner, and restore the pagination the list builders had dropped
  Sat, 08/29/2026 - 10:07
• Docs: refresh codebase metrics and add test-suite and architecture-surface sections
  Thu, 07/16/2026 - 09:00
• Docs: add a codebase metrics page (cloc)
  Thu, 07/16/2026 - 06:55
• pdv_webform vault grant link drops the form's query string (breaks Orchestra webform interaction)
  Mon, 07/13/2026 - 10:35
• Webform PDV configuration fields appear on every element/handler edit tab instead of only General
  Tue, 07/07/2026 - 19:15
• Docs: add Mermaid diagrams for the key model and main flows
  Thu, 06/25/2026 - 14:30
• pdv_file: serve upload-mode files the standard webform way instead of a custom route
  Thu, 06/25/2026 - 10:55
• Consent form: move consumer name out of the write-grant checkbox title for consistency
  Thu, 06/25/2026 - 09:45
• Add a link from the streamlined trust prompt to the complete item-by-item access form
  Thu, 06/25/2026 - 08:55
• Add test coverage: cross-owner 403 on per-item routes and Status Report checks
  Thu, 06/25/2026 - 08:05
• Decrypted vault export ZIP can be left at rest in private://pdv-export
  Thu, 06/25/2026 - 07:45
• Master KEK status check false-positives for non-local (Transit) wraps
  Thu, 06/25/2026 - 06:05
• Demo webforms are not translated on the French preview (titles and field labels stay English)
  Wed, 06/24/2026 - 21:55
• Record view page title says "Structured data" instead of naming the item
  Wed, 06/24/2026 - 21:30
• Polish the demo landing-page copy (French quality + consumer/service consistency)
  Wed, 06/24/2026 - 20:20
• Vault item form titles should name the item, not say "structured data" / "file"
  Wed, 06/24/2026 - 19:40
• Tugboat demo: add French as a switchable language to review the UI in French
  Wed, 06/24/2026 - 19:15
• Vault page: hide empty Access/Store request sections, collapse the inventory sections, and explain grants vs. trust
  Wed, 06/24/2026 - 18:50
• Passphrase-locked vault still shows the pdv_file "Save to my vault" checkbox
  Wed, 06/24/2026 - 08:55
• Tugboat preview installs a Drupal core pre-release, breaking the demo front page
  Wed, 06/24/2026 - 07:55
• Link the module name on the Tugboat demo landing page
  Tue, 06/23/2026 - 22:50
• Default body_inline_max_bytes to 16384 so small records are stored inline, not as Files
  Tue, 06/23/2026 - 22:45
• Let owners view a vault file from the Files list and the Edit form
  Tue, 06/23/2026 - 21:50
• Locked vault white-screens on direct decrypt routes (e.g. a stale Edit link); redirect to the unlock form instead
  Tue, 06/23/2026 - 21:05
• Make the vault unlock duration configurable per tenant, with a sliding idle timeout
  Tue, 06/23/2026 - 18:55
• Reorganize vault action buttons and add row batch actions
  Tue, 06/23/2026 - 18:30
• pdv_webform: degrade gracefully when the vault is unreachable (no misleading grant link or save checkboxes)
  Tue, 06/23/2026 - 12:10
• Add a Tugboat preview configuration (single-site, local-mode demo)
  Tue, 06/23/2026 - 10:40
• Owner passphrase: gate vault content with a user-held secret (protect against the operator)
  Mon, 06/22/2026 - 20:35
• pdv_client: encrypt vault handles at rest with an out-of-DB key (remote-compromise resistance)
  Mon, 06/22/2026 - 09:45
• Pre-release audit fixes: tenant-bound Subject KEK AAD, cross-key Master KEK rotation, and 100k/500k scalability hardening
  Sun, 06/21/2026 - 19:55
• Make Master KEK rotation pick up a new Vault/OpenBao Transit key version
  Sun, 06/21/2026 - 17:45