feat(license): VPP license delivery and enforcement hardening for runtime-v4 - #169

Merged

marconetsf merged 10 commits into

developmentfrom

feat/vpp-license-delivery

Aug 21, 2026

Commits on Aug 19, 2026

feat(license): deliver and transport VPP licenses over the debug channel

marconetsf
and
claude
committed
a2a173b
fix(license): strengthen anti-traversal guard, dedup license-path derivation

marconetsf
and
claude
committed
48bc688
fix(vpp): resolve symlinks in the containment guard and match the C derivation
marconetsf
committed
b48e715
feat(vpp): verify the package signature before compiling an uploaded plugin
marconetsf
committed
2da6c26
test(vpp): pin the python/bash tree digest contract with a cross-language test
marconetsf
committed
6026510
fix(vpp): validate the license blob on read and write, and write it atomically

marconetsf
and
claude
committed
e49382b
test(vpp): pin the anchor normalization against the real C, not a transcription

marconetsf
and
claude
committed
13758d8
fix(license): re-authenticate every debug command and gate the license FCs on role

marconetsf
and
claude
committed
87de838
test(vpp): follow the anchor normalization into license_platform.c (ADR-0003)

marconetsf
and
claude
committed
db4402b

Commits on Aug 20, 2026

fix(license): correctness round — token renewal, honest anchor, seal that seals

marconetsf
and
claude
committed
c96b374