Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
IABTechLab
/
trusted-server
Public
Notifications
You must be signed in to change notification settings
Fork
12
Star
42
Code
Issues
200
Pull requests
66
Actions
Projects
Wiki
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Wiki
Security and quality
Insights
Add design specs for the provider architecture and permission model epic
- #986
#986
Closed
aram356
wants to merge 27 commits into
main
IABTechLab/trusted-server:main
from
specs/providers-and-permissions
IABTechLab/trusted-server:specs/providers-and-permissions
Copy head branch name to clipboard
Conversation
Commits
27
(27)
Checks
Files changed
Closed
Add design specs for the provider architecture and permission model epic
#986
aram356
wants to merge 27 commits into
main
IABTechLab/trusted-server:main
from
specs/providers-and-permissions
IABTechLab/trusted-server:specs/providers-and-permissions
Copy head branch name to clipboard
Commits
Commits on Jul 31, 2026
Add design specs for the provider architecture and permission model epic
Show description for e54f066
aram356
committed
e54f066
View commit details
Copy full SHA for e54f066
Browse repository at this point
Address self-review findings and move policy into trusted-server.toml
Show description for a35f2ca
aram356
committed
a35f2ca
View commit details
Copy full SHA for a35f2ca
Browse repository at this point
Address review: close identity/privacy gaps in the provider and permission specs
Show description for 9886091
aram356
committed
9886091
View commit details
Copy full SHA for 9886091
Browse repository at this point
Address second review: close permission-algebra, egress, durability, and rollout gaps
Show description for 5c8c2e8
aram356
committed
5c8c2e8
View commit details
Copy full SHA for 5c8c2e8
Browse repository at this point
Address third review: regime-scoped grants, storage migration, and lifecycle repairs
Show description for 572b104
aram356
committed
572b104
View commit details
Copy full SHA for 572b104
Browse repository at this point
Address architecture review: legacy revocation, consent-field semantics, and distributed contracts
Show description for 2b4d776
aram356
committed
2b4d776
View commit details
Copy full SHA for 2b4d776
Browse repository at this point
Address fifth review: opt-out subclasses, GPP applicability, consistency eligibility, and rollout closure
Show description for de70ca9
aram356
committed
de70ca9
View commit details
Copy full SHA for de70ca9
Browse repository at this point
Commits on Aug 1, 2026
Address sixth review: global opt-out aggregation, negative authority, and storage-protocol coherence
Show description for c8b4b84
aram356
committed
c8b4b84
View commit details
Copy full SHA for c8b4b84
Browse repository at this point
Address seventh review: descope the epic periphery, close core findings, add a review ledger
Show description for 09e54e9
aram356
committed
09e54e9
View commit details
Copy full SHA for 09e54e9
Browse repository at this point
Address eighth review: suppression realizability, N+1 interim semantics, and descope propagation
Show description for ff1e113
aram356
committed
ff1e113
View commit details
Copy full SHA for ff1e113
Browse repository at this point
Merge main into specs/providers-and-permissions
aram356
committed
45c09b3
View commit details
Copy full SHA for 45c09b3
Browse repository at this point
Address ninth and tenth reviews: authentication-sound rowless handling, complete suppression contract, closed security channel
Show description for 43422b5
aram356
committed
43422b5
View commit details
Copy full SHA for 43422b5
Browse repository at this point
Commits on Aug 2, 2026
Address eleventh review: suppression recovery, authoritative rowless handling, and the closed DataDome contract
Show description for bf684e5
aram356
committed
bf684e5
View commit details
Copy full SHA for bf684e5
Browse repository at this point
Address twelfth review: two-record commit protocol, strong-class rowless proof, and bounded DataDome surfaces
Show description for ba25ba8
aram356
committed
ba25ba8
View commit details
Copy full SHA for ba25ba8
Browse repository at this point
Commits on Aug 3, 2026
Address thirteenth review: coherent suppression expiry, provable rowless prerequisites, honest failure semantics
Show description for 3523b36
aram356
committed
3523b36
View commit details
Copy full SHA for 3523b36
Browse repository at this point
Address fourteenth review: monotone commits, replay history, one opt-out lifetime, and closed DataDome directions
Show description for f3eacf5
aram356
committed
f3eacf5
View commit details
Copy full SHA for f3eacf5
Browse repository at this point
Address fifteenth review: rollback-safe rowless proof, admission for observed rows, and vendor-faithful DataDome cookie handling
Show description for 9a8596e
aram356
committed
9a8596e
View commit details
Copy full SHA for 9a8596e
Browse repository at this point
Commits on Aug 4, 2026
Address sixteenth review: dual admission sequences, fleet-linearizable suspension, and representable replay state
Show description for 2188522
aram356
committed
2188522
View commit details
Copy full SHA for 2188522
Browse repository at this point
Merge branch 'main' into specs/providers-and-permissions
aram356
authored
6caf67b
View commit details
Copy full SHA for 6caf67b
Browse repository at this point
Address seventeenth review: one N+1 contract, crash-safe suspension, revision-matched S2S, and fully closed DataDome/GPP boundaries
Show description for 184c9d9
aram356
committed
184c9d9
View commit details
Copy full SHA for 184c9d9
Browse repository at this point
Address eighteenth review: one N+1 test contract, total graphless state table, and single-source S2S authority
Show description for 1a15575
aram356
committed
1a15575
View commit details
Copy full SHA for 1a15575
Browse repository at this point
Address nineteenth review: invariant negative gates, complete state coverage, and single-source activation identity
Show description for fe4d7bd
aram356
committed
fe4d7bd
View commit details
Copy full SHA for fe4d7bd
Browse repository at this point
Address twentieth review: ordered classification procedure, historical activation register, and collision-free cache identity
Show description for 607453d
aram356
committed
607453d
View commit details
Copy full SHA for 607453d
Browse repository at this point
Commits on Aug 5, 2026
Merge branch 'main' into specs/providers-and-permissions
aram356
authored
9e19cc5
View commit details
Copy full SHA for 9e19cc5
Browse repository at this point
Commits on Aug 6, 2026
docs: finalize providers and permissions specifications
Show description for f5a77fa
aram356
committed
f5a77fa
View commit details
Copy full SHA for f5a77fa
Browse repository at this point
docs: inline normative specification annexes
Show description for be3e899
aram356
committed
be3e899
View commit details
Copy full SHA for be3e899
Browse repository at this point
Commits on Aug 7, 2026
docs: keep baseline specs unchanged
Show description for ffb63e1
aram356
committed
ffb63e1
View commit details
Copy full SHA for ffb63e1
Browse repository at this point
You can’t perform that action at this time.