fix(signing): Argus follow-ups on #789 — IDNA + IP literals, Protocol contract, misconfig warnings, diagnostic hygiene#798

Merged

bokelley merged 5 commits into

mainfrom

bokelley/signing-followups-argus

May 22, 2026

Commits on May 22, 2026

refactor(signing): centralize IDNA host canonicalization, add IP literal short-circuit

bokelley
and
claude
committed
feat(signing): public BrandSourcedJwksResolver Protocol + tighten jwks_source annotation

bokelley
and
claude
committed
feat(signing): warn on key_origins misconfiguration

bokelley
and
claude
committed
fix(signing): cap key_origins entry size, route cold-cache jwks_uri=None to JWKS_UNAVAILABLE, host-only diagnostic fallback

bokelley
and
claude
committed
chore(signing): docstring on BrandSourcedJwksResolver.__call__ to silence linter

bokelley
and
claude
committed