Amend Constitution: three §3 graves, and reconcile the broker's phasing - #17
Merged
Merged
Conversation
Both on the maintainer's authorisation. §3 gains three graves from the second prior-art review, each a documented production disaster mapped to a Setonix decision: drivers pulled into the kernel for the fast path (vhost-net, CVE-2019-14835), compiled-in but unused device paths (VENOM, CVE-2015-3456), and the catch-all right that decays into root (CAP_SYS_ADMIN). §10 is clarified to state that scheme mediation begins in Phase 2 (the scheme registry is the first broker-shaped component) while the full broker pillar - grant policy, prompt surface, revocation - lands in Phase 3. This removes a disagreement the research/0002 follow-through exposed: the threat model's §8 binds O-10 (confused deputy) and O-11 (scheme escape) in Phase 2, correct because mediation exists from the registry, yet §10 had grouped the whole broker under Phase 3 so §8 appeared to contradict the roadmap it maps against. §8 gains a paragraph stating the split, and now the two documents agree: mediation starts in Phase 2, the broker pillar and O-21..O-23 land in Phase 3. Logged in docs/CHANGELOG.md, as constitutional amendments always are. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Two constitution amendments, both on your authorisation this session.
§3 — three graves (you approved all three)
The "known graves to avoid" list gains, each a documented production disaster the second prior-art review mapped to a Setonix decision:
Rightsgrowth: no heterogeneous bundle right.§10 + §8 — where the broker binds (your call: adjust the constitution)
You asked whether we could adjust the constitution, and it's the cleaner fix. §10's Phase 2 now states that scheme mediation begins there (the scheme registry is the first broker-shaped component), and Phase 3 names the full broker (grant policy, prompt surface, revocation).
This removes a real disagreement: the threat model's §8 binds O-10 (confused deputy) and O-11 (scheme escape) in Phase 2 — correct, because mediation exists from the registry — but §10 had grouped the whole broker under Phase 3, so §8 appeared to contradict the roadmap it maps against. Now both agree: mediation (the O-10 surface) starts in Phase 2; the broker pillar and its obligations O-21…O-23 land in Phase 3. §8 gains a paragraph stating the split explicitly.
Scope
CONSTITUTION.md— §3 graves; §10 Phase 2/Phase 3 wordingdocs/threat-model.md— §8 reconciling paragraphdocs/CHANGELOG.md— both logged as constitutional amendmentsMarkdown and British-spelling gates clean (66 files). No obligations renumbered; no code touched.
🤖 Generated with Claude Code