sdk

ci → green (TypeScript, Rust, Go, Python offline jobs)

Python JWT tamper coverage now flips decoded signature bytes, removing a Python-version-dependent base64url pad-bit false negative. SDK master is 3926b45.

infrastructure

ci → green (Terraform/Compose validation + BetterAuth image build)

Docker target, local target, AWS placeholder plan, Compose profiles, and the BetterAuth health/discovery runtime smoke all passed.

sandbox

ci → green (tokenless offline matrix; live integration skipped without FRAUTHY_CI_TOKEN)

Runtime imports resolve the installed vendored SDK package; the staleness workflow is valid and skips with a notice when the private-repo token is absent.

Workspace dependencies are restored from a 5.7 MB offline archive produced only after a Socket Firewall-protected frozen Bun install, eliminating registry access from CI. The SDK snapshot tracks 3926b45.

Program-wide

Remote gate complete: SDK CI, infrastructure CI/image build, sandbox tokenless integration, and the manually-dispatched SDK staleness workflow are green.