Repository navigation
Authorize independent immutable graph publications with collector sessions #207
Description
Extend the existing collector session authentication with a stateless graph-publication authorization endpoint. Publications have independent IDs and require no telemetry run registration. The runs application retains upload/finalization endpoints and object storage. Verify authenticated membership, request validation, and unchanged event behavior with service-local tests; no cross-stack integration tests.
Activity
anth-volk commentedon Oct 26, 2026
This route was dropped when #208 closed on 2026-10-15. The runs application will no longer ask the collector to authorize uploads. Instead, the collector will publish Orrery graph files itself: first its artifact intake (PolicyEngine/microcosm-collector#12), then its graph worker, which builds and publishes them. Microcosm's publication doc is being corrected to match in PolicyEngine/microcosm#1403.