Identity Verification (JWT) — full stack for adversarial review - #1708

Open

nan-li wants to merge 21 commits into

mainfrom

nan/jwt-pr8-demo-ui

Commits on Aug 11, 2026

chore: normalize project.pbxproj ordering

nan-li
and
cursoragent
committed
bf7c24d

Commits on Aug 12, 2026

fix: [PR2] read-your-write consistency defects

nan-li
and
cursoragent
committed
3421d83
fix: scope RYW resolve to one user and lower the bar on timeout

nan-li
and
cursoragent
committed
953ff22
chore: tighten RYW comments to iOS comment style

nan-li
and
cursoragent
committed
c09d5a9
feat: [PR3] feature flags, JWT config, and the Identity Verification gate

nan-li
and
cursoragent
committed
1b80146
fix: [PR3] tighten params retry class and hydration handler race

nan-li
and
cursoragent
committed
9ea39ab
feat: [PR4] identity model JWT, the JWT repo, and the public API

nan-li
and
cursoragent
committed
2f3cd34
fix: [PR4] mark JWT bearer updates as local-only

nan-li
and
cursoragent
committed
5aea671
feat: [PR5] bind each Delta to the user that owns it

nan-li
and
cursoragent
committed
2c267bf
fix: [PR5] drop stale properties/subscription deltas instead of mis-stamping

nan-li
and
cursoragent
committed
b2a3c44
feat: [PR6] Identity Verification for the request pipeline

nan-li
and
cursoragent
committed
5f40aae
fix: [PR6] hold new-record IDs in purge tests under TEST delay

nan-li
and
cursoragent
committed
3197590
chore: [PR6] split types to clear SwiftLint length errors

nan-li
and
cursoragent
committed
a642d1c

Commits on Aug 13, 2026

fix: [PR6] keep restored Identify under IV so reshape can promote it

nan-li
and
cursoragent
committed
ebeb006
fix: [PR6] default missing addsNewRecords to true on Create User decode

nan-li
and
cursoragent
committed
b39bcff
fix: [PR6] keep uncached owned requests only while Identity Verification is on

nan-li
and
cursoragent
committed
1a3a237
feat: [PR7] in-app messages under Identity Verification

nan-li
and
cursoragent
committed
f74a573
fix: [PR7] reset in-app messages on user change only while newCodePathsRun

nan-li
and
cursoragent
committed
51718e0
fix: [PR7] refetch IAMs on 401 when a replacement token already landed

nan-li
and
cursoragent
committed
e5884a7
feat: [PR8] demo app Identity Verification UI

nan-li
and
cursoragent
committed
1fbdef9
chore: [PR8] (will revert) add local feature-flag override for testing

nan-li
and
cursoragent
committed
3f0ca5e