amadan
docs: pin the alias refusal line
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 file changed,
+1
−1
docs/superpowers/specs/2026-09-24-instance-moves-for-every-app-design.md+1 −1
CI passed — run details
diff --git a/docs/superpowers/specs/2026-09-24-instance-moves-for-every-app-design.md b/docs/superpowers/specs/2026-09-24-instance-moves-for-every-app-design.md| index dc76a001b..af17dd338 100644 |
| --- a/docs/superpowers/specs/2026-09-24-instance-moves-for-every-app-design.md |
| +++ b/docs/superpowers/specs/2026-09-24-instance-moves-for-every-app-design.md |
| @@ -713,7 +713,7 @@ in the region its data is already in, and then moves like any other. |
| | G14 | A replica record passes the move gate and then wedges in `preparing`: reconcile never mints a replica on a platform box, so `OwnsRoute` is false | `apiinstancemove.go:53-72` (no `Role` or `Replicas` check); `reconcile.go:210` | |
| | G15 | Instance-registered once-timers and `NextDue` live in the source box's registry and are lost on a move, silently | `internal/schedule/control.go:28` | |
| | G16 | An old console accepts DELETE on `landing`, which empties the instance | `provision.go:1008-1022` | |
| -| G17 | **A direct-mode `carlos add` files the route under the deployment's operator account, so console claims made as the app's own account are refused.** Every custom-domain claim on Tito's 71 controld hosts fails: `route elatromme.go.tito.io belongs to bab/titogo, claim says bae/titogo` (box journal, 2026-09-24; registry rows show `account=bab`). Adoption fixes it for those hosts by re-owning the row, but direct-mode adds need an explicit account (or to inherit the app's) for everyone else | `internal/domains/aliases.go:104-107`; `carlos add` direct mode | |
| +| G17 | **A direct-mode `carlos add` files the route under the deployment's operator account, so console claims made as the app's own account are refused.** Every custom-domain claim on Tito's 71 controld hosts fails: `route elatromme.go.tito.io belongs to bab/titogo, claim says bae/titogo` (box journal, 2026-09-24; registry rows show `account=bab`). Adoption fixes it for those hosts by re-owning the row, but direct-mode adds need an explicit account (or to inherit the app's) for everyone else | `internal/domains/aliases.go:106-108`; `carlos add` direct mode | |
| | G18 | An app's router is not the only process that dials instance sockets: Tito's relay (delivery) and its import-sync loop do too | titogo `internal/relay/flow.go:423-441`; `move_mirrored.go:32-35` | |
| ## 13. Slices |