Issues

• security(edge): hard-cap verifier TTL and skew overrides to contract limits

  zed-pkg/zed-infra#117 · Filter by author the1mills opened on Oct 7, 2026

• security(edge): reject ambiguous duplicate signing kid in JWKS snapshot

  zed-pkg/zed-infra#116 · Filter by author the1mills opened on Oct 7, 2026

• security(edge): bind private Cargo fallback URL to exact crate resource

  zed-pkg/zed-infra#115 · Filter by author the1mills opened on Oct 7, 2026

• security(edge): reject ambiguous duplicate capability grants

  zed-pkg/zed-infra#114 · Filter by author the1mills opened on Oct 7, 2026

• security: refresh Miniflare lock to remove vulnerable undici 7.29.0

  zed-pkg/zed-infra#110 · Filter by author ORESoftware opened on Oct 1, 2026

• Expose cacheable website-friendly desktop download manifest API

  zed-pkg/zed-infra#99 · Filter by author ORESoftware opened on Sep 26, 2026

• Harden CDN range, resume, conditional, and cache semantics for large desktop installers

  zed-pkg/zed-infra#98 · Filter by author ORESoftware opened on Sep 26, 2026

• Serve signed desktop stable/beta/nightly channel manifests with rollback protection

  zed-pkg/zed-infra#97 · Filter by author ORESoftware opened on Sep 26, 2026

• Serve canonical content-addressed desktop application artifacts from cdn.zpkg.net/apps

  zed-pkg/zed-infra#96 · Filter by author ORESoftware opened on Sep 26, 2026

• Support portable multi-forge source mirrors with immutable provenance

  zed-pkg/zed-infra#93 · Filter by author ORESoftware opened on Sep 26, 2026

• Verify registry artifacts by rebuilding from immutable source

  zed-pkg/zed-infra#92 · Filter by author ORESoftware opened on Sep 26, 2026

• Run package builds in hermetic, policy-governed developer environments

  zed-pkg/zed-infra#91 · Filter by author ORESoftware opened on Sep 26, 2026

• Add semantic parity gate between .ores-compose.yaml and production deploy targets

  zed-pkg/zed-infra#90 · Filter by author ORESoftware opened on Sep 26, 2026

• Generate ores-stack deploy-target v2 descriptors from Zed server authorities

  zed-pkg/zed-infra#89 · Filter by author ORESoftware opened on Sep 26, 2026

• Certify JWK rotation, stale-cache, and emergency revocation for edge capabilities

  zed-pkg/zed-infra#88 · Filter by author ORESoftware opened on Sep 26, 2026

• Authenticate Cloudflare-to-origin requests independently of end-user auth

  zed-pkg/zed-infra#87 · Filter by author ORESoftware opened on Sep 26, 2026

• Add route-scoped Cloudflare circuit breakers for multi-origin routing

  zed-pkg/zed-infra#86 · Filter by author ORESoftware opened on Sep 26, 2026

• Enforce single-authority writes and idempotency across multi-origin deployments

  zed-pkg/zed-infra#85 · Filter by author ORESoftware opened on Sep 26, 2026

• Add bounded hedged reads across compatible Zed origins

  zed-pkg/zed-infra#84 · Filter by author ORESoftware opened on Sep 26, 2026

• Admit origin compatibility fingerprints before Cloudflare multi-origin failover

  zed-pkg/zed-infra#83 · Filter by author ORESoftware opened on Sep 26, 2026

• DEN-2859: consume canonical Shared Auth proof policy at Zed edge admission

  zed-pkg/zed-infra#82 · Filter by author the1mills opened on Sep 26, 2026

• DEN-2859: add signed edge capability verification for authenticated fallback

  zed-pkg/zed-infra#80 · Filter by author the1mills opened on Sep 26, 2026

• Bound actual multipart publication bytes and reject ambiguous fields

  zed-pkg/zed-infra#78 · Filter by author the1mills opened on Sep 26, 2026

• Edge auth v1: signed fallback capabilities and provider-specific credential broker

  zed-pkg/zed-infra#74 · Filter by author the1mills opened on Sep 26, 2026

• Provision cross-org private source read token for Zed package CI

  zed-pkg/zed-infra#73 · Filter by author ORESoftware opened on Sep 22, 2026