Repository navigation

fix(api): restrict survey triage to reviewer groups by confidentiality - #1111

Merged

ericfitz merged 7 commits into

mainfrom

fix/1100-triage-reviewer-authz

Oct 18, 2026

Merged

fix(api): restrict survey triage to reviewer groups by confidentiality#1111
ericfitz merged 7 commits into
mainfrom
fix/1100-triage-reviewer-authz

Commits on Oct 18, 2026
- fix(api): restrict survey triage to reviewer groups by confidentiality
  
  ericfitz
  and
  claude
  committed
  9653da3
- fix(api): block submitter self-approval via intake status PATCH
  
  ericfitz
  and
  claude
  committed
  8d855bd
- fix(api): fail closed on unknown confidentiality in triage access
  
  ericfitz
  and
  claude
  committed
  c715a1b
- test(api): update survey workflow for reviewer-only triage
  
  ericfitz
  and
  claude
  committed
  109a1b2
- docs(adr): record intake status rule as confirmed human decision
  
  ericfitz
  and
  claude
  committed
  4ff0b25
- chore(sem): refresh SEM markers for changed functions
  
  ericfitz
  and
  claude
  committed
  0ea0112
- test(cats): make the CATS identity a Security Reviewer for triage seeding
  
  ericfitz
  and
  claude
  committed
  edb84e8