Upstream contribution · CopilotKit/OpenBot
OpenBot · Preserving shared OAuth registrations across OpenBot replicas
Problem
A replica unable to decrypt an OAuth client could interpret the read fault as absence and register a replacement. Changing the shared pointer made the existing client unavailable to a healthy replica.
Engineering response
Both reads, including the one inside the registration lock, distinguish typed credential-read faults and stop before registration. The connection route records a durable audit event and returns a retryable 503.
Evidence and scope
The PR describes controls with real encrypted rows and different keys, plus database route tests. The candidate preserved the existing pointer and made zero vendor registrations in the fault cases.