Vadym Samoilenko b427ee9f49 fix(authz): MT-3/6/7/8 org isolation + P1 English-first QC enforcement ... Multi-tenancy isolation (P0): - MT-3: Add get_job_or_403 (org membership check) to all 19+ job action endpoints - MT-6: Same gate added to all review_notes (5) and vtt_versions (4) handlers - MT-7: WebSocket /ws/jobs/{job_id} closes with 4403 on org mismatch; /ws/jobs passes accessible_org_ids to ConnectionManager; server-side keepalive at 20 s (asyncio.wait_for timeout) prevents proxy idle drops - MT-8: list_users scoped to org memberships for non-platform-admins WebSocket fixes (Mod Comms 2026-03-18 incident): - Frontend heartbeat lowered 30 000 → 20 000 ms (was at Apache timeout edge) - Terminal close codes 4001/4003/4004/4403 no longer trigger reconnect loop - Silently discard server "keepalive" frames alongside existing "pong" English-first QC (P1): - _assert_can_approve blocks target language approval until source is APPROVED - PRODUCTION/ADMIN roles bypass the gate - Source VTT edits reset stale APPROVED/PENDING_REVIEW/IN_REVIEW target states Tests (all passing): - backend/tests/unit/test_language_qc_english_first.py (15 cases) - backend/tests/unit/test_routes_jobs_org_isolation.py (12 cases) - backend/tests/unit/test_review_notes_org_isolation.py (16 parametrized cases) - backend/tests/unit/test_vtt_versions_org_isolation.py (16 parametrized cases) - backend/tests/unit/test_websocket_org_isolation.py (11 cases) - backend/tests/unit/test_admin_users_org_filter.py (7 cases) - frontend: useJobStatusWebSocket.terminal.test.ts (9 cases) - frontend: useJobStatusWebSocket.heartbeat.test.ts (9 cases) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-05-01 11:43:10 +01:00
..
v1	fix(authz): MT-3/6/7/8 org isolation + P1 English-first QC enforcement	2026-05-01 11:43:10 +01:00