aaronrene / knowtation public
BREAKING feat/sec-kn-4a-delegation-principal-binding-freeze #4 / 9
aaronrene · 43 days ago · Jul 26, 2026 · Diff

SEC-KN-4b: bind delegation principal to proposal author at apply.

Implement frozen R1-R9: canister created_by from X-Actor-Id only, author-required precheck with gate + re-derive + org_ref rejection, seven-tier regression tests, and migration script checks. Hosted apply stays fail-closed until T1 upgrade.

Governance: ROADMAP + OVERSEER-HANDOVER updated (SD-17). BV pending.

sha256:80c36bbd32a7d14013a23300129d9f49ba78f16c7348c295766de59419124e55 sha
sha256:0356eae188be7639ac843f2adf58fabf596d57526079775b1d161080846590a2 parent
+9 ~21 −2 symbols
sha256:378e44fa083873192837b1df807c2de5ee1a4ad682e3c4154ba0d4d09d5ed7b2 snapshot
+9
symbols added
~21
symbols modified
−2
symbols removed
0
dead code introduced
Semantic Changes 32 symbols
~ test/sec-kn-4-delegation-principal-binding.test.mjs .mjs 4 symbols added
+ delegationProposal function function delegationProposal L69–78
+ enableGate function function enableGate L64–67
+ mkDataDir function function mkDataDir L60–62
+ precheckLegacyBodyTrusted function function precheckLegacyBodyTrusted L86–123
~ docs/AGENT-DELEGATION-V0-SPEC.md .md 6 symbols modified
~ Agent Delegation v0 — Canonical Spec (Knowtation)
~ Wire schemas (v0, open, versioned)
~ 2 Pinned id formats (v0)
~ table
~ agent_identity/v0 — who owns this agent instance
~ table@L211
~ docs/OVERSEER-HANDOVER.md .md 5 symbols added, 2 symbols removed, 8 symbols modified
~ Knowtation-owned findings (from Pass 2)
~ table
~ code[text]
− NEXT SESSION — SEC-KN-4b build (PRIMARY) section NEXT SESSION — SEC-KN-4b build (PRIMARY) L20–136
− Governance gates checklist section Governance gates checklist L119–136
+ NEXT SESSION — SEC-KN-4b build verification (PRIMARY) section NEXT SESSION — SEC-KN-4b build verification (PRIMARY) L20–51
+ Prior session — SEC-KN-4b build (completed code; awaiting BV) section Prior session — SEC-KN-4b build (completed code; awaiting BV) L41–51
+ code[text] variable variable code[text] L29–40
+ NEXT SESSION — archived SEC-KN-4b build prompt section NEXT SESSION — archived SEC-KN-4b build prompt L51–167
+ Governance gates checklist section Governance gates checklist L150–167
~ Overseer Handover — Knowtation
~ Change log
~ table
~ Verified snapshot (what exists now)
~ table
~ docs/ROADMAP.md .md 3 symbols modified
~ Roadmap — knowtation
~ Build queue
~ table
~ hub/icp/src/hub/Migration.mo .mo
~ hub/icp/src/hub/main.mo .mo
~ hub/server.mjs .mjs
~ lib/agent/delegation-hosted-proposal.mjs .mjs 1 symbol modified
~ applyApprovedDelegationProposalFromCanister
~ lib/agent/delegation.mjs .mjs 3 symbols modified
~ handleAgentIdentityRegisterProposeRequest
~ handleDelegationGrantMintRequest
~ precheckApprovedDelegationProposal
~ scripts/verify-canister-migration.mjs .mjs
~ test/agent-delegation-e2e.test.mjs .mjs
~ test/agent-delegation-live-gate.test.mjs .mjs
~ test/delegation-hosted-proposal-l1b.test.mjs .mjs
~ test/hub-delegation-self-hosted-route.test.mjs .mjs
Older SEC-KN-4a: tick the freeze-review gate in the 4b build block (ro… sha256:0356eae188be7639ac843f2adf58fabf596d57526079775b1d161080846590a2 All commits Newer SEC-KN-4b: fix build-verification round-1 findings (4 MINOR) sha256:3c8fff616c4f314ae3095734b9b6e92380446f0e7857f0e4ab7703f55760e9ae

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:80c36bbd32a7d14013a23300129d9f49ba78f16c7348c295766de59419124e55 --body "your comment"