30852788202
94%

Ran 03 Aug 2026 09:05PM UTC

Jobs 1

Files 24

Run time 1min

Badge

Embed ▾

Committed 03 Aug 2026 09:00PM UTC coverage: 95.143%. Remained the same

Build # 30852788202

Build Type

push

github

Committed by

web-flow

Commit Message

docs(contract): sync CONTRACT.md §10.1 rule 8 — subject of the decision (#38)

Re-syncs the vendored contract from the server repo, which added rule 8 to the
§10.1 minimum local-verification set: a guard must decide on the caller's
credential and no other, and must never retry, refresh, or fall back to a
different one — in particular not the SDK client's own session.

Rule 8 is deliberately framed as being about control flow rather than claims.
That is what made SEC-085 invisible to three prior security passes and to the
§10.1 audit itself: rules 1-7 ask whether the token is good, and the PHP
framework guards satisfied all seven while still admitting a failed request
under the application's own service account. Rule 8 asks whether it is the token
the decision is about.

This SDK's guards already satisfy rule 8 — they return 401 at that point rather
than substituting another credential — so this is a documentation sync with no
code change.


Claude-Session: https://claude.ai/code/session_01SkTHvZQMV47t3UwkEtmB1D

Co-authored-by: Claude <noreply@anthropic.com>

Coverage Stats

4055 of 4262 relevant lines covered (95.14%)

15.29 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	30852788202.1	03 Aug 2026 09:05PM UTC	24	95.14	GitHub Action Run

ilpanich / axiam-rust-sdk / 30852788202
94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 30852788202

ilpanich / axiam-rust-sdk / 30852788202 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 30852788202

ilpanich / axiam-rust-sdk / 30852788202
94%

README BADGES
x