[SLICE 03][CORE-A] Complete namespace/project identity, principal/capability policy, trust classes, and append-only audit #28

New issue

Open

opened 2026-09-08 01:57:01 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 01:57:01 +00:00

Owner

Parent epic: #12
Depends on: #20
Refines: #1

Goal

Finish the foundational identity/authority model so later semantic/query/federation work inherits one correct boundary.

Implement:

stable opaque namespace/project IDs;
explicit project-id > canonical remote > path-hint resolution order;
explicit ambiguous/unresolved outcomes and no project→global fallback;
principal identity + read/session/project/global write capabilities;
authority checks separated from namespace resolution;
source/trust/provenance classes independent of text content;
append-only authorization/write/read-sensitive audit records;
namespace aliases/versioning without destructive project-ID changes.

Acceptance

Fixtures prove project isolation, explicit global-write separation, known-ID read denial, ambiguous project failure, path rename without identity loss, provenance cannot self-upgrade trust, and failed authorization leaves no partial durable write.

Parent epic: #12 Depends on: #20 Refines: #1 ## Goal Finish the foundational identity/authority model so later semantic/query/federation work inherits one correct boundary. Implement: - stable opaque namespace/project IDs; - explicit project-id > canonical remote > path-hint resolution order; - explicit ambiguous/unresolved outcomes and no project→global fallback; - principal identity + read/session/project/global write capabilities; - authority checks separated from namespace resolution; - source/trust/provenance classes independent of text content; - append-only authorization/write/read-sensitive audit records; - namespace aliases/versioning without destructive project-ID changes. ## Acceptance Fixtures prove project isolation, explicit global-write separation, known-ID read denial, ambiguous project failure, path rename without identity loss, provenance cannot self-upgrade trust, and failed authorization leaves no partial durable write.

nsaspy referenced this issue

2026-09-08 01:57:39 +00:00

[EPIC][CORE] Library-first Symbolic Memory v1: durable semantic world model, learning history, federation, and zero-model recall #38

nsaspy referenced this issue

2026-09-08 01:57:40 +00:00

[EPIC][CORE] Library-first Symbolic Memory v1: durable semantic world model, learning history, federation, and zero-model recall #38