fix(service-messaging): an HTTP ack binds the claim credential, so a reaped claim's late ack cannot overwrite the live re-claim - #17641

Merged

hotlong merged 5 commits into

mainfrom

claude/issue-17634-http-ack-claim-credential

Sep 11, 2026

Commits on Sep 11, 2026

wip(service-messaging): reproduce the late HTTP ack overwriting a live re-claim

hotlong
and
claude
committed
f945fa8
fix(service-messaging): an HTTP ack binds the claim credential, so a reaped claim's late ack cannot overwrite the live re-claim

hotlong
and
claude
committed
06215b0
docs(permissions): tenant-audit census counts the credentialed HTTP ack write (223 sites)

hotlong
and
claude
committed
b663bf7
Merge origin/main into claude/issue-17634-http-ack-claim-credential

hotlong
and
claude
committed
2407046
fix(service-messaging): keep tracker ids out of the HTTP ack refusal strings

hotlong
and
claude
committed
b373361