Armonia · Session owner and prompt author attribution #1875

Acceptance Criteria

• Creating a session through either session path records the caller as owner and creator.
• Every admitted prompt and created user message records the caller as author.
• A client that supplies owner or author in session metadata or prompt payload cannot change the recorded value.
• A session spawned by an agent records the parent session's owner as owner and the spawning session in its lineage.
• Existing sessions without an owner are reported as unowned, not attributed to whoever reads them.
• Session and message read APIs expose owner, creator, and author.

Testing Decisions

Extend the session creation, prompt admission, and session lineage tests on both paths; add a forgery test that supplies attribution through metadata.

Key Decisions

• Owner is mutable only by an explicit transfer action (out of scope here); creator and author are immutable.
• Agent-originated prompts are authored by the session owner's principal plus the acting agent identity, never by an anonymous system.

Constraints & Invariants

• Migration is additive; no existing session content changes.

Prior Art

• The session table and projector, V2 session admission, the session-spawn tool's metadata, and session lineage edges.

Source

• Part of Armonia: one shared coordination service, people as principals, distributed execution sites #1872
• Blocked by Armonia · Person identity: frontdoor authentication and verified principals #1874