Fix invitation IDOR and worker callback authorization gaps#229

Merged

MichielDean merged 4 commits into

mainfrom

Apr 14, 2026

Commits on Apr 14, 2026

sc-d9v2m: fix IDOR and worker callback auth gaps
Cistern Agent
committed
sc-d9v2m: simplify: extract requireWorkerCallback to deduplicate ReportProgress/ReportTestResult/ReportWorkerStatus preamble
Cistern Agent
committed
sc-d9v2m: fix ownsExecution error handling and add cross-team auth tests
Cistern Agent
committed
sc-d9v2m: docs: update documentation for IDOR and worker callback auth fixes
Cistern Agent
committed