Jonathan M HsiehandClaude Opus 5 d67585c245 fix(secrets): complete the binding and value contract at the Rust boundary ...

`validate` checked only the binding count, so a caller reaching the low-level
entry point past `bind_secrets` could register an environment variable name the
runtime cannot deliver, or bind a Secret to a name `runtime.env` already sets --
which would resolve by delivery order, with a value visible in the Function's
record and a value that is not.

Secret values are bounded here too, at the limit the service enforces, so an
oversized credential is refused before a request body is built rather than
after it has been serialized and uploaded.

Sandbox-reserved names are deliberately still the service's alone: that list
belongs to the runtime that owns it, and a copy here would drift from it
silently.

Both gate reproducers now fail closed with no request reaching the service.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UfmeJ533rQDnPBkMtjerV6

2026-09-11 17:10:43 +00:00

..

lancedb

fix(secrets): complete the binding and value contract at the Rust boundary

2026-09-11 17:10:43 +00:00

license_header.txt

ci: check license headers (#2076)

2025-01-29 08:27:07 -08:00