Overview
| Comment: | caps: gate private ticket fields on e instead of dropping them
The capability exists now (RFC 0004), so private_contact and contact are withheld by default and rendered to a holder of e. Default deny with no ungated-forge exemption: that rule would publish them. |
|---|---|
| Timelines: | family | ancestors | descendants | both | trunk |
| Files: | files | file ages | folders |
| SHA3-256: |
86fadebbabec8cfbe35c51ae36592c4f |
| User & Date: | dmestas on 2026-08-23 11:02:22.999 |
| Other Links: | manifest | tags |
Context
|
2026-08-23
| ||
| 11:08 |
caps: private tickets exist for holders of e
The edge resolved a CapSet and threw it away; it now rides the context, so an op can ask which letters the caller holds. Private tickets list, count and resolve for e, and for nobody else. One privacyWhere() so a fourth read path cannot silently ship without the clause. check-in: 9b2b188ece user: dmestas tags: trunk | |
| 11:02 |
caps: gate private ticket fields on e instead of dropping them
The capability exists now (RFC 0004), so private_contact and contact are withheld by default and rendered to a holder of e. Default deny with no ungated-forge exemption: that rule would publish them. check-in: 86fadebbab user: dmestas tags: trunk | |
| 10:37 | merge ticket field writes with trunk check-in: 616766e048 user: dmestas tags: trunk | |
Changes
Modified internal/harness/caps_test.go
from [af53d09b86]
to [409778c5bd].
[diff]
Modified internal/web/chrome_test.go
from [0c58c2728b]
to [0c950f2f96].
[diff]
Modified internal/web/web.go
from [5561489304]
to [65ba16f156].
[diff]