peter 8206384c91 test(fence): owner filters in any form, statement writes under any name, core commits by list ...

The owner-filter check missed an aliased() model, an import alias, .in_() and
filter_by; four live inline filters on aliased VideoState go through owned_by now.
Cross-unit writes are seen under any import name, through sa.update and via
__table__. Core modules may commit only where CORE_COMMITS names the reason;
trim_read and audit.gc flush now and their callers commit. The pin target, the
debug-session header and a link's target fetch through owned_row. The docs
claim what the fence holds, and say what is beyond it.

2026-10-20 00:45:21 +02:00

..

__init__.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

budget.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

cards.py

refactor(catalog): the unit's tables move into catalog/models

2026-10-19 02:03:14 +02:00

hero.py

feat(plex): every card rail in the reader's language; an episode in a poster rail stands as its show (E30 S1b)

2026-09-29 02:12:32 +02:00

pins.py

test(fence): owner filters in any form, statement writes under any name, core commits by list

2026-10-20 00:45:21 +02:00

queries.py

test(fence): owner filters in any form, statement writes under any name, core commits by list

2026-10-20 00:45:21 +02:00

rails.py

refactor(plex): playlists, playback, Discover and admin through the unit; the plex package is fenced

2026-10-19 22:42:46 +02:00