Overview
| Comment: | Add the sync login sender and gate each request's login transport so the client emits a login only when the peer requires it and never on clone's first round. |
|---|---|
| Timelines: | family | ancestors | descendants | both | harden |
| Files: | files | file ages | folders |
| SHA3-256: |
06b938cd87ce459086f2b85c7578ae03 |
| User & Date: | dmestas on 2026-07-12 11:31:11.059 |
| Other Links: | branch diff | manifest | tags |
Context
|
2026-07-12
| ||
| 12:13 | Gate private content on the receiver's grant so an unauthorized client discards it instead of storing it, keep a private igot from re-requesting content that will never arrive, and only offer to pull private content when the client holds the capability. closed check-in: 8014f49fbc user: dmestas tags: harden | |
| 11:31 | Add the sync login sender and gate each request's login transport so the client emits a login only when the peer requires it and never on clone's first round. check-in: 06b938cd87 user: dmestas tags: harden | |
|
2026-07-11
| ||
| 19:08 | Add the capability union rule so a successful login only widens a user's established permissions on top of the session baseline and can never clear a granted bit. check-in: 5a5d0517b4 user: dmestas tags: harden | |
Changes
Modified src/sync.zig
from [9b310925aa]
to [3b0558b673].
[diff]
Modified src/sync_test.zig
from [a115189b9e]
to [b6b6fa8741].
[diff]