FABRIC-3.md §H.11: refreshed gap analysis, end of session
Full sweep across the whole session-refactor design pass -- 7 of the original 10 §H.9 gaps are now closed. Compiles the current accurate picture: one genuinely open design question (more cards beyond the four named?), two small undecided pieces (creator-ceiling enforcement location, Zuse eligibility-list storage), five pure implementation gaps (design fully decided, nothing coded), and two explicitly-deferred non-goals (VM card multi-owner, elevation trigger alternates). Also updates H.10's stale "elevation trigger not yet usable" note now that H.7 confirmed the messaging substrate is already real. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Opus 5
parent
91dfb0a079
commit
d86b6de9cd
+33
-3
@@ -3846,6 +3846,36 @@ Two smaller, lower-risk items flagged in the same pass:
|
|||||||
functions (e.g. `session_set_pinned()` / `session_is_pinned()`); nothing, including existing
|
functions (e.g. `session_set_pinned()` / `session_is_pinned()`); nothing, including existing
|
||||||
Stadium code, reads `STADIUM_FLAG_PIN` directly off the patron header anymore. Session is
|
Stadium code, reads `STADIUM_FLAG_PIN` directly off the patron header anymore. Session is
|
||||||
the sole authority for both write and read, not just the write path.
|
the sole authority for both write and read, not just the write path.
|
||||||
- **Elevation trigger not yet usable (H.5/H.7).** Rides Hermes messaging, which per this
|
- **Elevation trigger, updated 2026-09-02: closer to usable than first thought.** Rides Hermes
|
||||||
document's own standing completion criterion (D.1) isn't the real implementation yet.
|
messaging — at the time this risk was flagged, assumed to not be the real implementation
|
||||||
Correct on paper, not usable until that substrate exists — expected, not a flaw.
|
yet. §H.7's later verification found the messaging substrate (`CH-REQUEST`/`CH-ACCEPT`/
|
||||||
|
`CH-CONFIRM`/ACK-NACK) is already real, working code. What's still missing is only the ACL
|
||||||
|
gate itself (H.8) and the `ELEVATE-REQUEST` message type/handler — smaller gaps than
|
||||||
|
originally flagged, not a missing substrate.
|
||||||
|
|
||||||
|
### H.11 — Gap analysis, refreshed (2026-09-02, end of session)
|
||||||
|
|
||||||
|
Full sweep across the whole design pass, not just a re-list of §H.9's original ten items — 7
|
||||||
|
of them are now closed (1, 2, 3, 4, 6, 7, 8). New sub-gaps surfaced while closing the old
|
||||||
|
ones. This supersedes §H.9 as the current accurate picture; §H.9 itself is left intact above
|
||||||
|
as historical record (each item already carries its own closure annotation inline).
|
||||||
|
|
||||||
|
**Genuinely open design question (never asked):**
|
||||||
|
1. Whether more cards exist beyond the four named (VM, word, block, message).
|
||||||
|
|
||||||
|
**Small design pieces still undecided:**
|
||||||
|
2. Where exactly creator-ceiling enforcement (§H.3) lands in the capsule birth flow.
|
||||||
|
3. Zuse's eligibility-list exact representation/storage (§H.5).
|
||||||
|
|
||||||
|
**Pure implementation gaps — design fully decided, nothing coded yet:**
|
||||||
|
4. `stadium_birth_hermes()`/`_artemis()` don't exist (§H.1).
|
||||||
|
5. The `Session` struct + its own header don't exist (§H.2).
|
||||||
|
6. `BMAPFMT`'s code edit to `block_subsystem.h`/`.c` (§F.4/§H.6 — field/API design fully
|
||||||
|
closed).
|
||||||
|
7. The message card's ACL gate isn't wired onto the real `CH-REQUEST` (§H.8).
|
||||||
|
8. Creator-ceiling enforcement itself, once item 2 above is answered.
|
||||||
|
|
||||||
|
**Explicitly deferred, not rejected (intentional non-goals for now):**
|
||||||
|
9. VM card multi-owner support (§H.4).
|
||||||
|
10. Elevation trigger alternates — live-console `sudo` path, pre-signed capability tickets
|
||||||
|
(§H.5).
|
||||||
|
|||||||
Reference in New Issue
Block a user