18 lines
1.8 KiB
JSON
18 lines
1.8 KiB
JSON
{
|
|
"task_id": "DEV-000026",
|
|
"task_revision": 1,
|
|
"architecture_revision": "bootstrap-1",
|
|
"base_repo_revision": "0d76c81f009730dbec2728621eb8f07e9cfa4c69",
|
|
"risk_tier": "C",
|
|
"intent": "Expose a read-only Creator API for Continuity ProspectiveItems by validating the Creator session through the Identity-owned Core API and enforcing owner-principal isolation in Continuity.",
|
|
"allowed_change_scope": {"paths": ["cmd/continuity-runtime/**", "deploy/docker-compose.prod.yml", "deploy/docker-compose.dev.yml", "tests/creator_continuity/**", "dev/tasks/DEV-000026-authenticated-continuity-read-api.json"]},
|
|
"forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "cmd/core-runtime/**", "cmd/commit-runtime/**", "cmd/creator-web/**"]},
|
|
"allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0},
|
|
"contracts": {"consume": ["contracts.identity@v1", "contracts.continuity@v1"], "may_change": []},
|
|
"semantic_owner": "continuity",
|
|
"assumptions": ["Core Runtime is the deployed Identity API endpoint for Creator session validation", "Creator reads are restricted to ProspectiveItems owned by the authenticated Principal"],
|
|
"acceptance_scenarios": ["missing or invalid Creator session is denied", "Identity service unavailability does not become authentication denial", "Creator can read an owned ProspectiveItem", "Creator cannot read another Principal's ProspectiveItem", "the read endpoint does not mutate canonical Continuity state"],
|
|
"required_tests": ["unit", "runtime HTTP", "owner-principal denial", "architecture", "remote Docker smoke"],
|
|
"terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_MISSING_CAPABILITY"]
|
|
}
|