Skip to content
quarry Check-in [54cc5168ca]
Login

Check-in [54cc5168ca]

Overview
Comment:caps phase 5a: web write paths gate on capabilities

gateCap on every forum/wiki/ticket/technote/chat POST; caps plane separated from sessions (WithCaps) so enforcement doesn't imply a login page; an ungated forge stays ungated. Harness proves category caps reach surfaces and that removing a letter closes the same request.

Timelines: family | ancestors | descendants | both | fossil-caps
Files: files | file ages | folders
SHA3-256: 54cc5168cac0b1f2f005a9b5990a9026b7c419438bd990a0be953fb30791af9c
User & Date: dmestas on 2026-08-22 16:23:35.324
Other Links: branch diff | manifest | tags
Context
2026-08-22
16:28
caps phase 5b: the capability matrix as executable spec

Each row driven twice — the letter alone must open its surface, and every OTHER letter together must not. Router resolves the repo from the request body for ops that carry it as a field (repos/update). check-in: 3df10d7f78 user: dmestas tags: fossil-caps

16:23
caps phase 5a: web write paths gate on capabilities

gateCap on every forum/wiki/ticket/technote/chat POST; caps plane separated from sessions (WithCaps) so enforcement doesn't imply a login page; an ungated forge stays ungated. Harness proves category caps reach surfaces and that removing a letter closes the same request. check-in: 54cc5168ca user: dmestas tags: fossil-caps

16:12
gofmt: comment alignment in api tests check-in: be45fccb29 user: dmestas tags: fossil-caps
Changes