Parents and children of check-in [86fadebbab]
|
2026-08-23
| ||
| 11:08 |
caps: private tickets exist for holders of e
The edge resolved a CapSet and threw it away; it now rides the context, so an op can ask which letters the caller holds. Private tickets list, count and resolve for e, and for nobody else. One privacyWhere() so a fourth read path cannot silently ship without the clause. check-in: 9b2b188ece user: dmestas tags: trunk | |
| 11:02 |
caps: gate private ticket fields on e instead of dropping them
The capability exists now (RFC 0004), so private_contact and contact are withheld by default and rendered to a holder of e. Default deny with no ungated-forge exemption: that rule would publish them. check-in: 86fadebbab user: dmestas tags: trunk | |
| 10:37 | merge ticket field writes with trunk check-in: 616766e048 user: dmestas tags: trunk | |