16 lines
1.6 KiB
JSON
16 lines
1.6 KiB
JSON
{
|
|
"task_id": "DEV-000017",
|
|
"task_revision": 1,
|
|
"architecture_revision": "bootstrap-1",
|
|
"base_repo_revision": "AFTER_DEV_000016",
|
|
"risk_tier": "D",
|
|
"intent": "Require Commit Runtime to construct AuthorizedAction only after live owner validation of Identity binding, Authority grant, Scope, and Work task revision over typed runtime queries.",
|
|
"allowed_change_scope": {"paths": ["contracts/identity/**", "contracts/authority/**", "contracts/commit/**", "contracts/work/**", "modules/identity/**", "modules/authority/**", "modules/commit/**", "modules/work/**", "adapters/**", "cmd/core-runtime/**", "cmd/commit-runtime/**", "database/bootstrap/**", "database/migrations/**", "deploy/**", "tests/action_commit/**", "tests/runtime_authorization/**", "dev/tasks/DEV-000017-runtime-authorized-action-validation.json"]},
|
|
"forbidden_change_scope": {"paths": ["architecture/**", "security/**", "modules/continuity/**", "modules/capability/**"]},
|
|
"allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0},
|
|
"semantic_owner": "commit",
|
|
"acceptance_scenarios": ["revoked or stale Authority grant cannot create AuthorizedAction", "missing Actor-Principal binding cannot create AuthorizedAction", "stale Work target revision cannot create AuthorizedAction", "Commit Runtime has no direct access to identity or work schemas"],
|
|
"required_tests": ["unit", "authority rejection", "runtime HTTP", "negative ACL", "architecture"],
|
|
"terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_MISSING_CAPABILITY", "REQUIRES_MIGRATION_DECISION"]
|
|
}
|