August release candidate (DO NOT MERGE) - #1019

Draft

aram356 wants to merge 547 commits into

mainfrom

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 15, 2026

Merge remote GAM attribution spec
prk-Jr
committed
367a593
Merge GAM cohort attribution implementation
prk-Jr
committed
78107e6
Merge branch 'main' into feature/ts-cli-ad-templates
prk-Jr
authored
fb07665
Sync EdgeZero to latest deploy-actions tip and adopt config gc
aram356
committed
5420390
Re-merge PR #940: Sync EdgeZero to latest deploy-actions tip and adopt config gc
aram356
committed
acca2dd
Merge remote-tracking branch 'origin/main' into worktree-edgezero-316-upgrade
aram356
committed
b23f270
Re-merge PR #940 after syncing it with main (which now carries #992 and #1010)
aram356
committed
f2a5eb8

Commits on Aug 16, 2026

Commits on Aug 17, 2026

Fix ad-template CLI section rendering and harden the audit commands
prk-Jr
committed
31de3f6
Verify generated ad-template config before it replaces the operator file
prk-Jr
committed
07b37a1
Add multi-page collection and crawl planning for ad-template generate
prk-Jr
committed
e7f8268
Accumulate cross-page slot evidence for ad-template generate
prk-Jr
committed
73ac39c
Infer section ad-unit templates from cross-page evidence
prk-Jr
committed
f32a1ac
Let the ad-template writer express section policy and per-section patterns
prk-Jr
committed
deced19
Crawl site sections in ad-template generate and write inferred templates
prk-Jr
committed
6722e19
Add device-profile cross-checking to ad-template generate
prk-Jr
committed
d9133f2
Document ad-template slot generation
prk-Jr
committed
2ea48e0
Report why a crawled page yielded no ad slots
prk-Jr
committed
90bc61e
Pace the ad-template crawl and allow a headful browser
prk-Jr
committed
b8a5e5c
Answer consent APIs and report GPT state during ad-template generate
prk-Jr
committed
142e384
Audit through a proxy and collapse lowercase React div-id tokens
prk-Jr
committed
f5c8616
Refuse ad-template slots that are one placement under per-render div ids
prk-Jr
committed
230958b
Document the ad-template crawl options added after the first draft
prk-Jr
committed
64b9414
Merge branch 'main' into 1014-gpt-diagnostics-doc-completeness
prk-Jr
authored
5156908
Merge branch 'main' into feat/admin-ec-lookup-endpoint
prk-Jr
committed
866bcd4
Merge #1025 1014-gpt-diagnostics-doc-completeness into rc/202608
prk-Jr
committed
253ff9c
Merge remote-tracking branch 'origin/main' into feat/ssat-debug-comment-config
prk-Jr
committed
0fb0cbb
Revise SSAT debug comment sensitivity model
prk-Jr
committed
7d2ba2d
Merge #1034 docs/gam-ts-cohort-attribution-spec into rc/202608
prk-Jr
committed
a04f47d
Tighten SSAT debug metadata privacy model
prk-Jr
committed
3715f27
Merge #928 feat/admin-ec-lookup-endpoint into rc/202608
prk-Jr
committed
b8b917e
Validate redacted SSAT metadata by schema
prk-Jr
committed
8a61578
Clarify SSAT upstream safety contract
prk-Jr
committed
de3db0a
Update SSAT debug comment implementation plan
prk-Jr
committed
1af743c
Merge #823 feature/ts-cli-ad-templates into rc/202608
prk-Jr
committed
691706d
Correct SSAT implementation verification plan
prk-Jr
committed
e7f057d
Fix SSAT plan metadata type handling
prk-Jr
committed
a99033f
Harden SSAT debug comment configuration modes
prk-Jr
committed
9825743
Enforce SSAT debug response metadata schemas
prk-Jr
committed
567c963
Document SSAT debug sensitivity modes
prk-Jr
committed
737c18a
Implement configurable cache header policies
ChristianPavilonis
committed
d7737d3
Format cache configuration docs
ChristianPavilonis
committed
d6328f4
Address cache policy review feedback
ChristianPavilonis
committed
0e413c2
Fix cache policy clippy warnings
ChristianPavilonis
committed
2de213d
Fix publisher test cache policy argument
ChristianPavilonis
committed
d6920d4
Preserve integration configuration values on rebase
ChristianPavilonis
committed
3b9063f
Harden configurable asset cache rules
ChristianPavilonis
committed
f4169fb
Improve publisher HTML cache policy when SSAT is inactive
ChristianPavilonis
committed
56083e3
Document dedicated server-side ad template switch
ChristianPavilonis
committed
d7bfa92
Add dedicated server-side ad template switch
ChristianPavilonis
committed
e9a55d4
Address cache policy review feedback
ChristianPavilonis
committed
03e429a
Preserve origin cache privacy on inactive templates
ChristianPavilonis
committed
38c9636
Resolve cache policy review feedback
ChristianPavilonis
committed
fd6d832
Merge remote-tracking branch 'origin/pr/1033' into rc/202608
ChristianPavilonis
committed
fefe73a
Merge remote-tracking branch 'origin/pr/860' into rc/202608
ChristianPavilonis
committed
49061aa

Commits on Aug 18, 2026

Document admin diagnostics review fixes
prk-Jr
committed
0e1a405
Clarify admin authentication probes
prk-Jr
committed
ec8ca8c
Plan admin diagnostics review fixes
prk-Jr
committed
2ec38e7
Fail closed for concrete admin routes
prk-Jr
committed
e637524
Deny admin diagnostics in publisher fallback
prk-Jr
committed
539beba
Keep admin diagnostics out of publisher fallback
prk-Jr
committed
17f0ac4
Keep admin EID diagnostics read only
prk-Jr
committed
4657cbf
Preserve raw admin EC diagnostic records
prk-Jr
committed
63e39b8
Document admin EC and EID diagnostics
prk-Jr
committed
178e2cd
Fix admin diagnostic test lint
prk-Jr
committed
c70de71
Reserve the full admin fallback namespace
prk-Jr
committed
69e1b8a
Collect the root page on every device profile
prk-Jr
committed
9841fcc
Design SSAT debug comment output formatting
prk-Jr
committed
8f5b345
Plan SSAT debug comment output formatting
prk-Jr
committed
0565947
Configure SSAT debug comment output format
prk-Jr
committed
2050f18
Pretty print SSAT debug comment dumps
prk-Jr
committed
00a969a
Document SSAT debug comment formatting
prk-Jr
committed
e4c52a8
Format SSAT debug comment implementation plan
prk-Jr
committed
ccda520
Document SSAT auction debug comment usage
prk-Jr
committed
67d1608
Merge #943 feat/ssat-debug-comment-config into rc/202608
prk-Jr
committed
2f4e77e
Document PR 823 review resolution design
prk-Jr
committed
cd24192
Clarify PR review resolution design
prk-Jr
committed
4b779ce
Plan PR 823 review resolution
prk-Jr
committed
f3cb010
Align ad stack gate diagnostics with runtime
prk-Jr
committed
bca89ef
Match ad template verification to runtime behavior
prk-Jr
committed
1b418cc
Define ad template CLI assertion contracts
prk-Jr
committed
1c2dfeb
Bound browser ad template evidence collection
prk-Jr
committed
e8fb2ee
Share browser sessions across ad template audits
prk-Jr
committed
6a64d0d
Preserve ad template crawl evidence
prk-Jr
committed
0ca3395
Make ad template updates transaction-safe
prk-Jr
committed
dfbc7c8
Document and enforce ad template audit contracts
prk-Jr
committed
64a88fa
Fix ad template design whitespace
prk-Jr
committed
af32498
Simplify legacy audit dispatch
prk-Jr
committed
f536381
docs: plan pre-navigation cookie fix
prk-Jr
committed
37f135a
Fix pre-navigation audit cookies
prk-Jr
committed
a58cfcf
docs: plan contiguous generated slots
prk-Jr
committed
cb0e62f
Keep generated ad slots contiguous
prk-Jr
committed
3707672
Format docs
prk-Jr
committed
a6a87ce
Merge branch 'rc/202608' of github.com:IABTechLab/trusted-server into rc/202608
ChristianPavilonis
committed
a603e98
Revert "Merge remote-tracking branch 'origin/pr/1033' into rc/202608"
ChristianPavilonis
committed
bf9cfdd
Reapply "Merge remote-tracking branch 'origin/pr/1033' into rc/202608"
ChristianPavilonis
committed
3953cd6
Revert "Reapply "Merge remote-tracking branch 'origin/pr/1033' into rc/202608""
ChristianPavilonis
committed
104d163
Merge branch 'main' into rc/202608
aram356
authored
f082560
Merge branch 'main' into feat/admin-ec-lookup-endpoint
aram356
authored
e79cccb
Merge branch 'main' into feat/ssat-debug-comment-config
aram356
authored
45c7ccd
Merge branch 'main' into 1009-esi-cacheable-root-spec
aram356
authored
e8c0eec
Merge branch 'main' into refactor/cache-headers
aram356
authored
7c865ce

Commits on Aug 19, 2026

Document comprehensive PR 928 review fixes
prk-Jr
committed
1a2d16c
Plan comprehensive PR 928 review fixes
prk-Jr
committed
cf25efb
Keep Fastly admin EC lookups read only
prk-Jr
committed
f3776a9
Validate mixed-case admin EC auth coverage
prk-Jr
committed
de61c43
Explain dropped admin EID preview sources
prk-Jr
committed
8649b43
Share core request cookie extraction
prk-Jr
committed
1198eb9
Harden admin diagnostic responses
prk-Jr
committed
a3a0479
Clarify admin diagnostics contracts
prk-Jr
committed
be434c2
Tighten admin diagnostic review coverage
prk-Jr
committed
436e25f
Resolve ad-template CLI review findings
prk-Jr
committed
b8568f3
Polish ad-template generator output
prk-Jr
committed
efad9c9
Show ad-template generation progress
prk-Jr
committed
bd052b4
Avoid duplicate crawl failure output
prk-Jr
committed
1d4ac66
Plan volatile div collision refusal
prk-Jr
committed
eb61c86
Refuse ambiguous volatile ad slots
prk-Jr
committed
daae07b
Refuse known volatile ad slot family
prk-Jr
committed
cc16ddd
Merge branch 'main' into feature/ts-cli-ad-templates
prk-Jr
authored
e8f4593
Document PR 1013 review remediation
prk-Jr
committed
02597cf
Clarify PR 1013 remediation outcomes
prk-Jr
committed
9419424
Plan PR 1013 review remediation
prk-Jr
committed
8101248
Make Fastly template cache reads fallible
prk-Jr
committed
47a58a8
Preserve injection for unsupported encodings
prk-Jr
committed
7329ed8
Scope terminal privacy to synthesized responses
prk-Jr
committed
df35e79
Refuse publisher ESI and seam collisions
prk-Jr
committed
752fbf3
Validate and version-guard the SSAT debug comment options
prk-Jr
committed
b3ae41f
Harden template cache boundaries
prk-Jr
committed
5491204
Make initial GPT scheduling one-shot
prk-Jr
committed
341bd52
Remove ESI spike residue
prk-Jr
committed
eb8e57a
Align ESI spike documentation and tooling
prk-Jr
committed
d0c3cb7
Fix ESI design whitespace
prk-Jr
committed
379c33d
Design template cache terminology rename
prk-Jr
committed
24a855b
Use synthetic fixtures for per-render slot tests
prk-Jr
committed
e935e14
Accept a same-host HTTPS upgrade during slot generation
prk-Jr
committed
09b7e4a
Plan template cache terminology rename
prk-Jr
committed
7d21559
Name template cache namespace and diagnostics
prk-Jr
committed
c2cd68c
Clarify template cache documentation
prk-Jr
committed
ced398b
Describe shared templates consistently
prk-Jr
committed
ca4f249
Fix template cache rustdoc reference
prk-Jr
committed
1969dff
Rename template cache local harness
prk-Jr
committed
424af92
Use template cache terminology in documentation
prk-Jr
committed
0a59c92
Clarify template cache documentation
prk-Jr
committed
99fb7ca
Document template cache migration exceptions
prk-Jr
committed
1680e0a
Add APS publisher rendering experiment
ChristianPavilonis
committed
4b8e04e
Merge commit 'refs/pull/1024/head' of github.com:IABTechLab/trusted-server into rc/202608-pr-1024
ChristianPavilonis
committed
e9bf8f2
Document trusted client IP header design
prk-Jr
committed
e2f1f63
Clarify trusted header validation
prk-Jr
committed
d940723
Plan trusted client IP implementation
prk-Jr
committed
932b9f8
Ignore local worktrees
prk-Jr
committed
209bea2
Add trusted client IP configuration
prk-Jr
committed
3d542ff
Differentiate trusted client IP header errors
prk-Jr
committed
6b7db93
Resolve authenticated forwarded client IP
prk-Jr
committed
01c2c47
Use resolved client IP for middleware geo
prk-Jr
committed
6314947
Inject APS publisher-native runner
ChristianPavilonis
committed
6078a46
Preserve authoritative client IP absence
prk-Jr
committed
bf2d1b2
Document trusted client IP forwarding
prk-Jr
committed
99f8311
Clarify trusted header name restrictions
prk-Jr
committed
5cb94e6
Clarify Fastly client IP sanitization order
prk-Jr
committed
53dbaee
Reserve the full admin namespace at the fallback boundary
prk-Jr
committed
caf4422
Require prefix-level admin EC auth coverage
prk-Jr
committed
8684e1b
Merge commit '4b8e04e41d2b9b85ff9b12471ba0eb79c0f4f9fa' into rc/202608-pr-1024
ChristianPavilonis
committed
41484a7
Strengthen trusted client IP shared secret validation
prk-Jr
committed
800e40f
Strip client-supplied X-Forwarded-For at the edge
prk-Jr
committed
7d4da82
Resolve the trusted client IP behind one sanitizing call
prk-Jr
committed
87d9697
Mark diagnostics responses terminal-private
prk-Jr
committed
9a1cba9
Anchor the shared seam to the parsed body end
prk-Jr
committed
82db770
Merge branch 'fix/1013-diagnostics-privacy' into 1009-esi-cacheable-root-spec
prk-Jr
committed
9e95dd8
Merge branch 'fix/1013-structural-seam-and-meta-csp' into 1009-esi-cacheable-root-spec
prk-Jr
committed
ce9c3c6
Merge branch 'main' into worktree-edgezero-316-upgrade
aram356
authored
fc969ce
Merge branch 'rc/202608-pr-1024' into rc/202608
ChristianPavilonis
committed
1aefb13

Commits on Aug 20, 2026

Merge branch 'main' into issue-1007-cache-control
aram356
authored
915ee6f
docs: design round 3 review remediation
prk-Jr
committed
f73a4f5
Merge branch 'main' into feature/ts-cli-ad-templates
prk-Jr
authored
6ee9c16
docs: refine round 3 remediation design
prk-Jr
committed
6275d60
Plan round 3 review remediation
prk-Jr
committed
d8cc3e8
Ignore agent implementation worktrees
prk-Jr
committed
e707758
Merge branch 'main' into feat/ssat-debug-comment-config
prk-Jr
authored
c6c184f
Keep page bids responses terminal private
prk-Jr
committed
6ed133a
Preserve initial ad scheduler latch across handoff
prk-Jr
committed
8abf9ae
Cancel invalid template cache reservations
prk-Jr
committed
c8671cc
Close template cache review gaps
prk-Jr
committed
733b660
Mark page bids response as must use
prk-Jr
committed
e2ef9f2
Resolve round-4 review on ad-template generation
prk-Jr
committed
b836fad
Clarify trusted client IP secret validation
prk-Jr
committed
a8694da
Merge remote-tracking branch 'origin/main' into fix/trusted-client-ip-header
prk-Jr
committed
57c0aa6
Validate trusted client IP shared secrets
prk-Jr
committed
b0c88ab
Template a slot that never appears on the site root
prk-Jr
committed
78c0db4
Record trusted client IP verification
prk-Jr
committed
2a7052e
Scope the retired admin keys reservation to its own namespace
prk-Jr
committed
84b84c3
Clarify forwarded client IP header guidance
prk-Jr
committed
2cd4826
Merge branch 'main' into feat/admin-ec-lookup-endpoint
prk-Jr
authored
6fb4238
Merge branch 'main' into 1009-esi-cacheable-root-spec
prk-Jr
authored
c01d7ac
Merge remote-tracking branch 'origin/main' into rc/202608
prk-Jr
committed
6751750
Restore upstream publisher behavior and harden cache policies
ChristianPavilonis
committed
06b0df8
Address GPT diagnostics review feedback
ChristianPavilonis
committed
49e7094
Merge current main into cache policy branch
ChristianPavilonis
committed
9c1b236
Merge remote-tracking branch 'origin/pr/928' into rc/202608
ChristianPavilonis
committed
d909f1b
Merge remote-tracking branch 'origin/pr/940' into rc/202608
ChristianPavilonis
committed
00b4de3
Merge remote-tracking branch 'origin/pr/943' into rc/202608
ChristianPavilonis
committed
53fd5f7
Merge remote-tracking branch 'origin/pr/1032' into rc/202608
ChristianPavilonis
committed
fcfce2f
Merge remote-tracking branch 'origin/pr/823' into rc/202608
ChristianPavilonis
committed
31f718b
Merge remote-tracking branch 'origin/pr/860' into rc/202608
ChristianPavilonis
committed
e44b03e
Merge branch 'main' into experiment/aps-native-rendering
aram356
authored
a9a9c0a
Switch esi dependency to released crates.io 0.7.2
prk-Jr
committed
19034b2
Merge remote-tracking branch 'origin/pr/1008' into rc/202608
ChristianPavilonis
committed
0bd1c7c
Merge branch 'main' into feature/ts-cli-ad-templates
aram356
authored
073d564
Merge branch 'main' into worktree-edgezero-316-upgrade
aram356
authored
46b7052
Merge remote-tracking branch 'origin/pr/1013' into rc/202608
ChristianPavilonis
committed
1c60e69
Format configuration guide
ChristianPavilonis
committed
6c416e6
Prevent shared caching of inactive publisher HTML
ChristianPavilonis
committed
d8499bb
Merge remote-tracking branch 'origin/main' into issue-1007-cache-control
ChristianPavilonis
committed
76f0372
Remove legacy C2 harness from release CI
prk-Jr
committed
2234e9b
remove fastly staging requirement for datadome blockage
ChristianPavilonis
committed
6b70c8b
Merge branch 'rc/202608' of github.com:IABTechLab/trusted-server into rc/202608
ChristianPavilonis
committed
247cfd6
Harden trusted client IP header handling
prk-Jr
committed
5d03b77
Merge branch 'experiment/aps-native-rendering' into rc/202608
ChristianPavilonis
committed
47faca4
Prevent APS creative frame scrollbars
ChristianPavilonis
committed
63370fc
Prevent APS creative frame scrollbars
ChristianPavilonis
committed
d4cd2cc

Commits on Aug 21, 2026

Pin edgezero dependencies to immutable rev instead of branch
aram356
committed
f90f638
Document new CLI lifecycle and config gc commands
aram356
committed
bf47680
Drop stale EdgeZero v0.0.4 qualifiers from env-overlay docs
aram356
committed
40dd9b3
Clarify trusted client IP VCL setup
prk-Jr
committed
e080e6e
Document PR 823 round-five review resolution
prk-Jr
committed
e3d0312
Plan PR 823 round-five review resolution
prk-Jr
committed
d215554
Preserve generation browser option contracts
prk-Jr
committed
76c337e
Protect borrowed section templates during generation
prk-Jr
committed
75afced
Clarify audit generation diagnostics
prk-Jr
committed
28ae90c
Pin audit evidence recognition invariants
prk-Jr
committed
364c1d2
Align ad-template generation documentation
prk-Jr
committed
e17ddc1
Satisfy borrowed template inference lint
prk-Jr
committed
543e45a
Wire browser settle defaults to the correct commands
prk-Jr
committed
78a0a0b
Merge branch 'main' into feature/ts-cli-ad-templates
prk-Jr
authored
33a654e
Merge branch 'main' into rc/202608
prk-Jr
committed
16473c7
Merge branch 'main' into 1009-esi-cacheable-root-spec
prk-Jr
authored
558bd68
Merge branch 'main' into fix/trusted-client-ip-header
prk-Jr
authored
ab4abcb
Merge #1048 remote-tracking branch 'origin/pr/1048' into rc/202608
prk-Jr
committed
f77e0a2
Harden APS publisher-native rendering
ChristianPavilonis
committed
69b30c0
Merge branch 'main' into experiment/aps-native-rendering
ChristianPavilonis
authored
13a6ecf
Preserve inactive cache policy across revalidation
ChristianPavilonis
committed
8927e13
Merge main into rc/202608
ChristianPavilonis
committed
cf353e3
Merge #823 into rc/202608
ChristianPavilonis
committed
59dddff
Merge #940 into rc/202608
ChristianPavilonis
committed
d68b78c
Merge #1013 into rc/202608
ChristianPavilonis
committed
4865d4f
Merge #1008 into rc/202608
ChristianPavilonis
committed
393f72f
Merge #1042 into rc/202608
ChristianPavilonis
committed
57591af
Remove duplicate APS runner helper after RC merge
ChristianPavilonis
committed
58532d7

Commits on Aug 24, 2026

Merge main into rc/202608
prk-Jr
committed
eaa86c2