Overview
| Comment: | Add the capability union rule so a successful login only widens a user's established permissions on top of the session baseline and can never clear a granted bit. |
|---|---|
| Timelines: | family | ancestors | descendants | both | harden |
| Files: | files | file ages | folders |
| SHA3-256: |
5a5d0517b4f5c01203f3e5852666ae15 |
| User & Date: | dmestas on 2026-07-11 19:08:35.097 |
| Other Links: | branch diff | manifest | tags |
Context
|
2026-07-12
| ||
| 11:31 | Add the sync login sender and gate each request's login transport so the client emits a login only when the peer requires it and never on clone's first round. check-in: 06b938cd87 user: dmestas tags: harden | |
|
2026-07-11
| ||
| 19:08 | Add the capability union rule so a successful login only widens a user's established permissions on top of the session baseline and can never clear a granted bit. check-in: 5a5d0517b4 user: dmestas tags: harden | |
| 18:34 | Track the client receive-side private marker per sync section 7.5: a bare private card sets a per-session pending flag that the next file or cfile card consumes at handler entry to mark its delivered content private, tolerating intervening comment and non-content cards, leaving a repeat set, carrying it across reply bodies within a session but never across the session boundary, and rejecting an argument-bearing private card as a fatal card-arity abort. check-in: 6b69bb3437 user: dmestas tags: harden | |
Changes
Modified src/sync.zig
from [461fa652ed]
to [9b310925aa].
[diff]
Modified src/sync_test.zig
from [de04b08579]
to [a115189b9e].
[diff]