PR #1842 — Deep review recommended
- Decision to make
- Can this session-policy change be reviewed confidently without revoked-session regression coverage?
- Start here
- src/auth/session_policy.ts — this file carries the review decision.
- Then verify
- tests/auth/session_policy.test.ts — verify revoked-session coverage.
- GitHub confirms
- PR is open.Head SHA observed.CI status observed.Required checks remain final in GitHub.
- Reviewz infers
- Auth/session behavior changed.Sensitive path touched.Regression evidence appears limited.
- Not visible to Reviewz
- No visible regression test covers expired refresh token + revoked session.
- Next safe action
- Open GitHub PR, review the session policy change first, then verify or request missing regression coverage.