fix: revalidate Host authority when publishing prepared restore controllers

2026-10-26 20:39:28 +09:00
parent e84057f402
commit eb24cb04dc
2 changed files with 64 additions and 7 deletions
@@ -465,6 +465,13 @@ where
                WorkerError::RestoreCandidateClosing,
            ));
        }
+        // Preparation's read-only authorization is not a publication grant.
+        // Revalidate current Host authority after commit, before effects/input,
+        // including a publication retry on this same private Controller.
+        initialized
+            .worker
+            .validate_subjektiv_body_publication()
+            .map_err(WorkerBootstrapError::Worker)?;
        if !self.effects_applied {
            self.activation_failed = true;
            self.activation