[PM-41576] PAM partial filtered data - #1359

Open

Hinton wants to merge 14 commits into

mainfrom

pam/cipher-partial-data

Commits on Sep 9, 2026

feat(vault): decrypt server-restricted (PAM-gated) partial ciphers

Hinton
authored and
patriksvensson
committed
b4a77e6
refactor(vault): parse restricted partial data as camelCase LoginUri

Hinton
authored and
patriksvensson
committed
abac970
Minor tweaks

Hinton
authored and
patriksvensson
committed
6ffb3f2
feat(vault): fail-closed guard against re-encrypting partial cipher views

Hinton
authored and
patriksvensson
committed
492145d
Fmt

Hinton
authored and
patriksvensson
committed
02ff3df
feat(vault): harden PAM partial ciphers per review

Hinton
authored and
patriksvensson
committed
39a75c3
fix(vault): honor strict decryption for partial ciphers

Hinton
authored and
patriksvensson
committed
5838ec5
feat(vault): drive PAM gating from server response on cipher merge

Hinton
authored and
patriksvensson
committed
5304551
feat(vault): add a gated edit path for PAM ciphers under lease

Hinton
authored and
patriksvensson
committed
2f6f1ec
fix(vault): persist bulk-share write-returns through the cipher merge

Hinton
authored and
patriksvensson
committed
11f8848
fix(vault): refuse a partial original in the admin edit path

Hinton
authored and
patriksvensson
committed
ca40fa4
fix(vault): evict ciphers the bulk-share write-return withholds

Hinton
authored and
patriksvensson
committed
2b719b8
refactor(vault): track bulk-share eviction with a single withheld set

Hinton
authored and
patriksvensson
committed
4b538ef
fix(vault): unwrap the write-return name in the gated edit test

Hinton
authored and
patriksvensson
committed
30fc315