feat: a human-only gate that actually requires a human act (SYD-281) - #243

Open

seanperkins wants to merge 16 commits into

mainfrom

feat/syd-281-human-act-integrity

Commits on Aug 28, 2026

docs: design for separating attribution from authorization (SYD-281)
seanperkins
committed
77be8e1
docs: rev 2 of SYD-281 design after seven-seat review panel
seanperkins
committed
89f1311
docs: rev 3 of SYD-281 design — identity rule after round 2
seanperkins
committed
43d1635
docs: rev 4 of SYD-281 design — complete claim path after round 3
seanperkins
committed
dc13178
docs: rev 5 of SYD-281 design — migration correctness after round 4
seanperkins
committed
4f3ea7c
docs: rev 5 header and population B consistency
seanperkins
committed
a896ad9
docs: record round 4 of the SYD-281 review panel
seanperkins
committed
34f53dd
docs: implementation plan for SYD-281
seanperkins
committed
76e495b
feat: three accessors splitting authorization, credential and row identity (SYD-281)
seanperkins
committed
f4b0e86
refactor: derive the acting agent instead of passing it alongside (SYD-281)
seanperkins
committed
bb7cfdf
feat: human-only services demand a HumanActor the adapter minted (SYD-281)
seanperkins
committed
1fdb454
feat: in a supervised session the agent holds the work (SYD-281)
seanperkins
committed
1813963
fix: a supervised session cannot borrow a dispatch worker's identity (SYD-281)
seanperkins
committed
33600b4
feat: reset supervised claims to the new holder identity (SYD-281)
seanperkins
committed
6f870a7
feat: say why a supervised session was refused, and who is acting (SYD-281)
seanperkins
committed
01292bf
fix: close three gates the changeset review found still open (SYD-281)
seanperkins
committed
d14771e

Navigation Menu

Uh oh!

feat: a human-only gate that actually requires a human act (SYD-281) - #243

feat: a human-only gate that actually requires a human act (SYD-281)#243
seanperkins wants to merge 16 commits into
mainfrom
feat/syd-281-human-act-integrity

Commits on Aug 28, 2026

docs: design for separating attribution from authorization (SYD-281)

docs: rev 2 of SYD-281 design after seven-seat review panel

docs: rev 3 of SYD-281 design — identity rule after round 2

docs: rev 4 of SYD-281 design — complete claim path after round 3

docs: rev 5 of SYD-281 design — migration correctness after round 4

docs: rev 5 header and population B consistency

docs: record round 4 of the SYD-281 review panel

docs: implementation plan for SYD-281

feat: three accessors splitting authorization, credential and row identity (SYD-281)

refactor: derive the acting agent instead of passing it alongside (SYD-281)

feat: human-only services demand a HumanActor the adapter minted (SYD-281)

feat: in a supervised session the agent holds the work (SYD-281)

fix: a supervised session cannot borrow a dispatch worker's identity (SYD-281)

feat: reset supervised claims to the new holder identity (SYD-281)

feat: say why a supervised session was refused, and who is acting (SYD-281)

fix: close three gates the changeset review found still open (SYD-281)