id(world): default ceiling is the whole catalog, so F12.4 registry additions would widen every world #838

Activity

1. github-actions

   assigned

   dezren39

   on Oct 25, 2026
2. dezren39

   added a commit that references this issue on Oct 25, 2026

   docs(id): design client-side capability providers under the ceiling m…

   ...

   9bf4f2f
3. dezren39

   added

   kind/securitySecurity issue or security hardeningSecurity issue or security hardening

   security-adjacentTouches security-sensitive surface; extra care and reviewTouches security-sensitive surface; extra care and review

   source/humanFiled directly by a humanFiled directly by a human

   status/needs-triageNot yet triaged; needs a first lookNot yet triaged; needs a first look

   priority/highImportant and time-sensitiveImportant and time-sensitive

   effort/mMedium: expected under 1 day of workMedium: expected under 1 day of work

   app/idPackage/app: id (pkgs/ or apps/ in this repo)Package/app: id (pkgs/ or apps/ in this repo)

   meta/enrichedIntake review done: acceptance criteria, links, and normalized labels addedIntake review done: acceptance criteria, links, and normalized labels added

   on Oct 26, 2026
4. dezren39 commented on Oct 26, 2026

   

   dezren39

   on Oct 26, 2026

   MemberAuthor

   More actions

   Intake review

   Still live: verified on current main (a2eef6f) — CapLedger::new in pkgs/id/src/world_caps.rs still sets allowed to catalog_names() (the whole catalog), and a checkpoint still omits a full-catalog ceiling.

   Related: #534 (F12.4 registry — the change that would make the catalog data and trigger this), #789 (F13.7 client providers are the other registration path).

   Notes / risks: authority-widening by binary upgrade is exactly what the Phase 12 ceiling rule forbids; this must land BEFORE any sensitive provider (F12.5 http.fetch, F13.7 client providers) is registered, not after.

   Suggested approach: add the per-provider default (including excluded) to the F12.4 manifest design first, default new providers to excluded, and pin it with the registration test in the acceptance criteria.

   🤖 Fleet monitor intake enrichment — acceptance criteria appended to the body, labels normalized and meta/enriched applied this pass.
5. dezren39

   added

   nextOrg Project gate: queued next — orchestrator adds to the boardOrg Project gate: queued next — orchestrator adds to the board

   mode/onlineFully doable remotely: design, config, code, cloudFully doable remotely: design, config, code, cloud

   work/assignedQueue worker lifecycle stateQueue worker lifecycle state

   and removed

   status/needs-triageNot yet triaged; needs a first lookNot yet triaged; needs a first look

   on Oct 27, 2026
6. 53 remaining items

   Load more
7. dezren39

   added

   queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

   status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

   on Nov 3, 2026
8. dezren39 commented on Nov 3, 2026

   

   dezren39

   on Nov 3, 2026

   MemberAuthor

   More actions

   🤖 Agent note · state: parked

   • Agent: queue worker (repo-worker-code), lane D shift
   • Session / ID: task 6510
   • Found via: queue claim (resume after prior park expired)
   • Task: Task 6510 for issue id(world): default ceiling is the whole catalog, so F12.4 registry additions would widen every world #838 re-claimed and re-verified fresh at 2026-11-03T03:30Z: canonical fix PR fix(id): per-provider default ceiling — newly registered providers stay out unless opted in (#838) #4656 is still OPEN and Drew-authored (dezren39, head e9122d8). This lane does not edit, push, or merge a Drew-owned PR, so task 6510 is parked again.
   • Expectation: Resume after the owning author acts on PR fix(id): per-provider default ceiling — newly registered providers stay out unless opted in (#838) #4656; then revalidate issue id(world): default ceiling is the whole catalog, so F12.4 registry additions would widen every world #838, PR fix(id): per-provider default ceiling — newly registered providers stay out unless opted in (#838) #4656 state, CI, and ownership before completing task 6510. Preserve worktree ~/git/fleet/6510 and the unpublished local head f416ccf0e without altering it.
   • Links: PR fix(id): per-provider default ceiling — newly registered providers stay out unless opted in (#838) #4656; issue id(world): default ceiling is the whole catalog, so F12.4 registry additions would widen every world #838
9. dezren39

   added

   queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

   status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

   and removed

   status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

   queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

   on Nov 3, 2026
10. dezren39

    added 3 commits that reference this issue on Nov 3, 2026

    fix(id): per-provider default ceiling — newly registered providers st…

    ...

    5b02e57

    test(id): prefix new ceiling tests with test_ per pkgs/id AGENTS.md (#…

    ...

    82e3bdd

    Merge pull request #4656 from developing-today/queue/6510-838-default…

    ...

    f28aa79
11. dezren39

    closed this as completedin #4656on Nov 3, 2026
12. dezren39

    removed

    status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    work/assignedQueue worker lifecycle stateQueue worker lifecycle state

    on Nov 3, 2026
13. dezren39 commented on Nov 3, 2026

    

    dezren39

    on Nov 3, 2026

    MemberAuthor

    More actions

    🤖 Agent note · done

    • Agent: repo queue worker lane A (repo-worker-code)
    • Session / ID: task 6510 · shift 2026-11-02 22:00 CST
    • Found via: queue resume — PR fix(id): per-provider default ceiling — newly registered providers stay out unless opted in (#838) #4656 existed from the prior attempt but was conflicted with main (mergeable_state dirty)
    • Task: Rebased branch queue/6510-838-default-deny-ceiling onto current main (one conflict in world/core.rs: kept the new memory_budget field and the default_ceiling_names() ceiling), re-ran targeted tests on the laptop (world_caps 19/19, server_ceiling 4/4, id-core lib 276 pass / 1 pre-existing failure reproduced on clean main), dispositioned the sole Codex P1 (test_ prefix — fixed, thread resolved), force-with-lease pushed 82e3bdd, and merged PR fix(id): per-provider default ceiling — newly registered providers stay out unless opted in (#838) #4656 (merge commit f28aa79).
    • Expectation: issue closed by the merge; no follow-up needed.
    • Links: fix(id): per-provider default ceiling — newly registered providers stay out unless opted in (#838) #4656 · task 6510 (repo-health-code-pilot)