fix(route-surface): security + correctness + x402 hardening for #717 (F1,F1-HMAC,F3,F3+,F4,F5,F6,F7,F8,P1b) - #718

Closed

bussyjd wants to merge 9 commits into

feat/route-surface-gatesfrom

fix/route-surface-hardening

Commits on Jul 8, 2026

fix(x402): login-CSRF + open-redirect hardening on SIWx /auth/verify (F4, F5)
bussyjd
committed
fix(x402): fail closed for exact-only route tables in ForwardAuth (F7)
bussyjd
committed
fix(openapi): resolve route-surface gate/price by verifier specificity, not declaration order (F6)
bussyjd
committed
fix(sell): validate reserved paths over declared routes incl /auth suffixes (F8)
bussyjd
committed
fix(tunnel): fail safe when offer-bound hostnames can't be queried — don't steamroll bound origins (P1b)
bussyjd
committed
fix(x402): NetworkPolicy pinning job-broker ingress to the verifier (F1)
bussyjd
committed
feat(x402): accept the x402 sign-in-with-x SIGN-IN-WITH-X header (F3)
bussyjd
committed
feat(x402): HMAC-authenticate the verifier→broker hop (F1 defense in depth)
bussyjd
committed
feat(x402): advertise the sign-in-with-x extension in the SIWx challenge (F3 follow-up)
bussyjd
committed