Tags and Properties for Check-in 54cc5168ca
- branch=fossil-caps inherited from [be3686ccbe]
- sym-fossil-caps inherited from [be3686ccbe]
Context
|
2026-08-22
| ||
| 16:23 |
caps phase 5a: web write paths gate on capabilities
gateCap on every forum/wiki/ticket/technote/chat POST; caps plane separated from sessions (WithCaps) so enforcement doesn't imply a login page; an ungated forge stays ungated. Harness proves category caps reach surfaces and that removing a letter closes the same request. check-in: 54cc5168ca user: dmestas tags: fossil-caps | |
| 14:19 |
caps phase 1: fossil cap strings in OLTP, EffectiveCaps expansion, roles→caps migration
RFC 0004 §3/§5. v never implies u; a excludes s x y; s is universal; blank nobody+anonymous = private. Migration runs on every open, idempotent, never clobbers explicit caps. check-in: be3686ccbe user: dmestas tags: fossil-caps | |