amadan
instance-bound-tokens-155
Human
#155 half 1, built: a clitokens kind bound to one incarnation of one instance, resolving to the non-mintable role svcrole.Self that reaches only its own host on six doors (GET/PATCH the instance with addrs+probe only, its move status, its update settings within instancecontrol). Person-only mint door POST …/instances/{host}/token and carlos instances token. No automatic delivery (half 2). Spec rev 4 + Astra R1-R3 and final review in docs/superpowers/specs/. Waiting on Paul's copy review, then merge.
Commits
20
Files changed
49
+4009 −71
Discussions
0
0 open
Tasks
8/9
done
Discussions
- No discussions on this branch yet.
Tasks 8/9 done
- Spec rev 1 + Astra review Done
- Plan Done
- Store: kind, columns, CLIPrincipal, svcrole.Self Done
- Gate: cliRoute host check, incarnation check, Self doors Done
- Update settings writes within instance_control Done
Activity
- task updated: CLI verb and docs (copy review)
- task updated: Whole-branch Astra review
- claude agent, operated by paul@keymail.dev pushed 3e90e650a console: the delete revoke takes a token snapshot, not a record read (#155)
- claude agent, operated by paul@keymail.dev pushed 8f8867d72 census: #155's record-write re-pins and root-read overlay (PROPOSED-155)
- claude agent, operated by paul@keymail.dev pushed 44feec797 Merge remote-tracking branch 'origin/main' into instance-bound-tokens-155
- claude agent, operated by paul@keymail.dev pushed dfadd4677 #155: the copy is approved (Paul, 2026-10-16, all 12 strings unchanged)
- claude agent, operated by paul@keymail.dev pushed 66e7c1eb0 console: the delete revoke spares a replacement incarnation (#155)
- task updated: Update settings writes within instance_control
- task updated: Mint door, listing, revoke on delete, purge/move kind lists
- task updated: Plan
- task updated: Store: kind, columns, CLIPrincipal, svcrole.Self
- task updated: Gate: cliRoute host check, incarnation check, Self doors
- claude agent, operated by paul@keymail.dev pushed 3f73f1e03 review: Astra whole-branch brief (#155)
- claude agent, operated by paul@keymail.dev pushed 9942b6309 carlos instances token, and its docs (copy drafts) (#155)
- claude agent, operated by paul@keymail.dev pushed bc8adfddb console: pin the instance record creation sites (#155)
- claude agent, operated by paul@keymail.dev pushed e26f8e27f console: mint an instance token; delete revokes it; credential surfaces name the host (#155)
- claude agent, operated by paul@keymail.dev pushed b780fafc2 console: an instance sets its own update settings within instance_control (#155)
- claude agent, operated by paul@keymail.dev pushed 7354517c2 console: GET, PATCH and move status admit an instance's own credential (#155)
- claude agent, operated by paul@keymail.dev pushed e42e2258a console: cliRoute's host check and the self binding (#155)
- claude agent, operated by paul@keymail.dev pushed ed7512cef console: the instance token kind in the store (#155)
- claude agent, operated by paul@keymail.dev pushed bc8166593 svcrole: Self, outside the catalogue, and AllowSelf (#155)
- claude agent, operated by paul@keymail.dev pushed a14da1b25 spec rev 4 and plan: answer Astra round 3 (limiter key per incarnation, orphan rows unlisted)
- task updated: Spec rev 1 + Astra review
- claude agent, operated by paul@keymail.dev pushed 5471efd99 plan: instance-bound tokens (#155 half 1)
- claude agent, operated by paul@keymail.dev pushed 6f4bb5c40 spec: Astra round 3 brief
- claude agent, operated by paul@keymail.dev pushed 11757160b spec: instance-bound tokens rev 3, answering Astra round 2
- claude agent, operated by paul@keymail.dev pushed d0a6e5062 spec: instance-bound tokens rev 2, answering Astra round 1; round 2 brief
- claude agent, operated by paul@keymail.dev added task CLI verb and docs (copy review)
- claude agent, operated by paul@keymail.dev added task Whole-branch Astra review
- claude agent, operated by paul@keymail.dev added task Merge