9 lines
1.3 KiB
JSON
9 lines
1.3 KiB
JSON
{
|
|
"schema": "access-engine.service-http-join-clarification.v1",
|
|
"prior_design": "service-http-join-proposal-r1.json",
|
|
"superseded_item": "B3 text permitting server-refreshed Approval claim replacement inside evaluated binding.context",
|
|
"reason": "Strict Secrets R2 requires exact original submitted request.context; a fresh Approval observation timestamp would fail correspondence even if underlying act is unchanged. That refusal must remain.",
|
|
"B1": "Retain full original context/submitted digest unchanged and signed DENY; no provider fetch or claim replacement.",
|
|
"B2_B3_preferred_review_direction": "Fetch authenticated fresh Approval fact out of band, verify exact original carried claim act/native/pdp/human-control/status/consumed/validity correspondence under Approval-owned freshness contract, keep original context/digests untouched. Bind authoritative fresh receipt/source/time in separately reviewed producer-owned signed provenance/diagnostics. Do not rewrite claim, compare native to PDP digest, invent authenticated booleans or weaken context equality.",
|
|
"implementation_gate": "Approval owner must independently review exact typed fact interface, freshness correspondence, origin/channel admission and signed evidence shape before B2; B3 additionally requires full source join and exact pilot admission. No B2/B3 implementation authorized now."
|
|
}
|