Skip to content

RAGE #48: least-privilege Auto-Dig client service session - #49

Draft
lost-rob0t wants to merge 5 commits into
mainfrom
rage/48-autodig-client-session
Draft

RAGE #48: least-privilege Auto-Dig client service session#49
lost-rob0t wants to merge 5 commits into
mainfrom
rage/48-autodig-client-session

Conversation

@lost-rob0t

Copy link
Copy Markdown
Owner

Tests-first implementation for #48. Initial head intentionally specifies the missing owner-side session boundary before production code.

RED contract:

  • exact public lifecycle capability set including system.capabilities;
  • no worker claim/heartbeat/complete/fail authority;
  • no document/graph/workspace mutation authority;
  • invalid token/principal/workspace configuration fails closed;
  • existing WebSocket workspace enforcement remains authoritative.

This remains generic Quasar authority. No Bixby-specific commands or protocol fields are introduced.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant