docs(decisions): record D-090 declared-reference admission at the D-028 seam - #107
Merged
Merged
Conversation
…28 seam A reference argument to the host_secret_* caller contract is a request to resolve a reference under an authorized operation, not authority in itself. Ring 1 admission must deny references not declared for the requesting consumer by default. Calling the seam establishes only the seam boundary; it approves no particular reference. The seam is not a general arbitrary-secret-read service. ADR 0062 declares the kernel operation; ADR 0063 names secret_reference_ref in the CommandShape env value-source; ADR 0065 fixes the reference form. No new entity, field, endpoint, or signature change; no accepted decision reversed; per-consumer admission recorded as a Ring 1 obligation because the Capability linkage is deferred by ADR 0062; broker implementation remains blocked per ADR 0012/0040/0043. Change class A.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Purpose
Record D-090's default-deny declared-reference admission contract at the
host_secret_*seam. Calling the seam establishes the seam boundary but approves no particular reference. Per-consumer admission is a Ring 1 obligation; ADR 0062 defers a typed Capability link. This Class A documentation change authorizes no broker implementation.Ring changed
Boundary checks
OperationShaperemains upstream ofCommandShapeValidation
just verifypassed: node-tools, static-gates, and fixtures.Charter compliance
Complies with implementation charter v1.6.0. Ring 3 documentation only; no cross-ring imports added.
Agent use
hcs-security-reviewer(clear after amendments)