security: seal Campaign delivery inputs

2026-07-21 17:54:34 +02:00
parent 9f4eab07f6
commit 50c509d161
8 changed files with 350 additions and 44 deletions
@@ -240,6 +240,7 @@ class CampaignJob(Base, TimestampMixin):
    eml_local_path: Mapped[str | None] = mapped_column(String(1000))
    eml_size_bytes: Mapped[int | None] = mapped_column(Integer)
    eml_sha256: Mapped[str | None] = mapped_column(String(64), nullable=True, index=True)
+    execution_input_sha256: Mapped[str | None] = mapped_column(String(64), nullable=True)

    build_status: Mapped[str] = mapped_column(String(50), default=JobBuildStatus.PENDING.value, nullable=False, index=True)
    validation_status: Mapped[str] = mapped_column(String(50), default=JobValidationStatus.NEEDS_REVIEW.value, nullable=False, index=True)