Harden email replies, editor container billing and lifecycle, MCP merge/approval confirmation, GitHub pull mirrors and BYOK keys (INT-P2..P21)
Email replies require envelope==From, a Cloudflare DMARC/aligned-DKIM pass and an expiring v2 MAC. Containers settle before forgetting a session (alarm retry), bill min(elapsed, held), alarm at the exact cap, re-check plan and write access, and a cron closes rows whose hold expired; admin stop matches the session id. MCP subscriber quota is per user, merge_pull needs a human-capable client and unconfirmed agent approvals are stored as comments. Mergefix private opt-in needs an account admin and PR descriptions honour it. Pull mirrors re-verify the installer and never copy private GitHub code into non-private repos. Also: 15s room re-auth, read-only open throttle, nonce delimiters, replay cleared on revocation, loopback redirect scheme check, OAuth codes consumed only after validation, limits before request-state lookups, an optional BYOK monthly token cap, and legacy BYOK keys re-sealed by cron with the unbound fallback removed.
29 files changed+780−145
Rendering diff…