hyperswitch
feat(deja): route every clock and entropy read in the router through one seam
#14091

Merged

feat(deja): route every clock and entropy read in the router through one seam #14091

maverox merged 32 commits into main from work/deja-seam-everything

maverox assigned

maverox 33 days ago

maverox marked this pull request as ready for review 32 days ago

maverox requested a review 32 days ago

maverox commented on 2026-09-08

fix(deja): record the JWT decode outcome so replay does not race the …

30b262b7

chore(deja): bump the pin to carry the recording decision on its span

2c4b1ab1

chore(deja): drop the direct deja-context dependency now the facade c…

ec4f6de6

feat(deja): route connector clock reads through the date_time seams

c17d2b7a

feat(deja): add the common_utils seams for uuid, nanoid, and random-d…

5cc695b8

feat(deja): seam the RNG inside RSA-OAEP encryption, and record why R…

c5fb9119

feat(deja): route connector clock and entropy reads through the seams

9ff1700c

fix(deja): read the clock once instead of twice in revenue recovery

73d9d53f

fix(deja): sort the oidc signing keys before drawing one, so a record…

89db7ce9

feat(deja): seam recovery codes and the temp password on their plain …

eb312598

feat(deja): route the rest of router's clock and entropy reads throug…

22a0f3c1

chore(deja): document router_env's and deja_boot's clock and entropy …

526eb338

feat(deja): route scheduler's and redis_interface's remaining clock a…

63d9bfb0

test(deja): route the test suites' clock and entropy reads through th…

39590b94

chore(deja): gate the raw clock and entropy reads behind the seams

34cfcc88

chore(deja): note why the two generate_uuid_v4 calls in create_user_a…

4d4fdc67

test(deja): assert the two inherited properties this refactor most ne…

3ba01f3d

fix(deja): keep now_unix_timestamp_nanos, routed through the now() seam

d4fde014

chore(deja): stamp the ingress boundary with its structural role

1d00d21c

chore(deja): bump the deja pin past main and onto the hasher-seam rev…

672dd94c

chore(deja): use deja's absent-executor fail-stop instead of a local …

ba9345a9

chore(deja): pin deja main rather than the hasher branch

326733d0

fix(deja): record response headers as an ordered pair list

4273f7c0

maverox force pushed from 936bd1eb to 4273f7c0 32 days ago

swangi-kumari dismissed these changes on 2026-09-08

maverox added S-test-ready

maverox dismissed their stale review via c7987f5b 32 days ago

jarnura requested changes on 2026-09-08

github-actions removed S-test-ready

maverox force pushed from c7987f5b to 4273f7c0 32 days ago

fix(deja): keep the conversion error instead of discarding it

33f576dd

docs(deja): cut the seam commentary down to what a reader cannot re-d…

c61f6ab2

fix(deja): keep every value of a repeated response header

11fe2f27

fix(deja): refuse a recording whose headers this build cannot read

7b7cd481

hrithikesh026 approved these changes on 2026-09-09

kashif-m commented on 2026-09-09

jarnura approved these changes on 2026-09-09

kashif-m approved these changes on 2026-09-09

jagan-jaya approved these changes on 2026-09-09

VenuMadhav2541 approved these changes on 2026-09-09