feat: three-actor RLS + adversarial attack integration tests (Alice/Bob/Mallory)#1095

Merged

pyramation merged 10 commits intomainfrom

feat/rls-alice-bob-integration-test

May 10, 2026

Commits on May 10, 2026

feat: add Alice/Bob RLS + feature flag integration tests
pyramation
committed
fix: correct Alice API is_public, rename allAppFiles to appFiles, pre-seed private file for RLS test
pyramation
committed
feat: expand integration tests with Mallory (3rd actor) and comprehensive RLS/attack scenarios
pyramation
committed
fix: replace invalid Mallory UUIDs (m is not hex) with valid fa-prefix UUIDs
pyramation
committed
refactor: clean up upload integration test — expectRlsDenied, expectSuccess, superuser verification, DRY SQL
pyramation
committed
fix: revert superuser verification to use same HTTP path (addresses connection isolation concern)
pyramation
committed
Merge pull request #1098 from constructive-io/feat/upload-test-cleanup
pyramation
authored
fix: correct mutation variable shapes and expand expectRlsDenied patterns
pyramation
committed
Merge pull request #1100 from constructive-io/fix/upload-test-mutation-variables
pyramation
authored
fix: handle masked errors and nested null in expectRlsDenied
pyramation
committed