core/php-tenant
8
0
Fork 0
Code Issues 43 Pull requests 33 Projects Releases Packages Wiki Activity Actions

audit: review workspace and tenant isolation on dev branch #1

New issue
Closed
opened 2026-02-20 01:37:41 +00:00 by Clotho · 0 comments
Clotho commented 2026-02-20 01:37:41 +00:00
Member
Copy link

Review the multi-tenancy system on the dev branch. Check BelongsToWorkspace trait, model scoping, middleware, and test coverage. Report findings.

Review the multi-tenancy system on the dev branch. Check BelongsToWorkspace trait, model scoping, middleware, and test coverage. Report findings.
Clotho added the
clotho
 label 2026-02-20 01:37:41 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
dev
feat/test-workspace-controller
feat/workspace-ownership-transfer
feat/ide-helper-annotations
feat/test-namespace-service
feat/artisan-provision-command
feat/workspace-activity-audit-log
feat/bulk-workspace-invitations
feat/openapi-docs
feat/add-infection-mutation-testing
feat/fix-readme-namespaces
feat/test-entitlement-webhook-service
feat/invitation-and-role-improvements
feat/workspace-lazy-loading
feat/invitation-soft-deletes
feat/totp-edge-case-tests
feat/standardise-error-responses
feat/entitlement-exception-hierarchy
feat/consolidate-user-relationships-v2
feat/clarify-workspace-scope-architecture
feat/validate-invitation-token-format
feat/constrain-feature-code-fk
feat/fix-usage-race-condition
feat/fix-token-timing-attack
feat/add-workspace-role-index
feat/add-phpstan-larastan
feat/complete-user-stats-stubs
feat/fix-namespace-n-plus-1
feat/fix-parent-feature-cascade
feat/namespace-cascade-delete
feat/pin-core-dependency
feat/remove-hardcoded-domain
feat/test-workspace-team-service
feat/workspace-return-types
main
v0.0.3
v0.0.2
v0.0.1
Labels
Clear labels   
P1

Priority 1 - Critical

  
P2

Priority 2 - Important

  
P3

Priority 3 - Nice to have

  
PHP

PHP codebase

  
agent-ready

   
bug

Bug fix

  
clotho

Assigned to Clotho AI agent

  
discovery

Auto-discovered by agent

  
docs

Documentation

  
epic

   
refactor

Code quality refactoring

  
review

Needs human review

  
security

Security hardening

  
testing

Test coverage

  
athena

Assign to Athena AI agent (M3 Ultra)

  
athena-gemini

Dispatch to Gemini CLI on M3 Ultra

  
audit

Code audit task

  
clotho

Assign to Clotho AI agent for processing

  
clotho-gemini

Dispatch to Gemini CLI on darbs (AU)

  
codex

Dispatch to Codex CLI on gateway for analysis

  
darbs-claude

Dispatch to Claude on darbs (AU)

  
security

Security review task

  
wiki

Documentation/wiki update

No labels
P1
P2
P3
PHP
agent-ready
bug
clotho
discovery
docs
epic
refactor
review
security
testing
athena
athena-gemini
audit
clotho
clotho-gemini
codex
darbs-claude
security
wiki
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: core/php-tenant#1
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?