Zoom transcript connector (rung-2/3, red-teamed) - #15
Merged
Merged
Conversation
Recording-as-document connector on S2S OAuth (BYOT: admin-created app, no
marketplace). ACL reconstructed from recording share settings, stated
honestly as rung-2/3 (no oracle): none => host-only mirrored; internally =>
operator token + host (admin-assigned; authentication_domains mismatch
quarantines); publicly => quarantine, passcode or not; unknown => poison.
Identity through the directory-vouched emails gate only (zoom never creates
canonicals; unvouched host quarantines). Opt-in participant widening rides
the weakest-claim provenance floor. VTT parsed python-side into speaker
turns; document_id zoom:{uuid} (never the reused numeric id), uuids always
double-encoded; month-chunked backfill sized for trial-tier Heavy limits;
monotonic valid_from with content digest (the slack L1 lesson, pre-baked);
absence-of-bookkept-uuid diff parks and drains through /v1/admin/retire with
the proven ordering guards; idle-inclusive heartbeats; freshness-gate +
console registration (drift-bound).
Red-team caught and this commit fixes: a HIGH retraction-durability loss
(mid-backfill crash checkpointed the popped book before the ledger — parks
now persist before every cursor save); participants fetched before the vouch
gate decided (now strictly ACL-before-content, call-log negatives added);
secret in dataclass repr; ghost bookkept entries silently riding a stamped
reconcile (now block the stamp + alarm); window-placement assumption
documented as over-hide-only.
46 zoom tests; full ingest suite 564 green; rust registrations hermetic
green; fmt/clippy clean. Live validation awaits a Pro-tier seat.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
# Conflicts: # crates/verity-server/src/connectors_admin.rs # crates/verity-server/src/source_freshness.rs
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Meeting transcripts (VTT) as documents under a reconstructed audience from recording share settings — honestly rung-2/3, no oracle, fail-closed on every unknown. S2S OAuth BYOT; vouched-identity-only welds; monotonic stamps pre-baked; absence-diff retraction through /v1/admin/retire. Red-team caught a HIGH crash-durability loss of detected retractions + an ACL-before-content gap — both fixed with regression tests. 46 tests; suites green. Live proof awaits a Pro-tier seat.
🤖 Generated with Claude Code