7c827866
docs: align provenance section with the one-token decision
The section still described per-space tokens with reader/proposer/writer roles, which the decisions table and the authorization section had already retracted in favour of one token plus mandatory provenance. Also records what implementation had to settle: the agent mailbox derives from our own origin rather than the bare cookie domain, X-Agent-Base is mandatory and must be an object name, identity travels as X-Agent and X-Agent-Session with the base coming only from If-Match, a non-owner human resolves to anonymous, and cookie expiry is not enforceable so network-key rotation is the only logout-everywhere lever.
bigbes <bigbes@gmail.com> — 2026-07-22 08:14:35 UTC
Commit 7c82786681409f246f2f77110d659fa422267959 —
view raw patch
Parent(s):
fe913656
| File | Status | + | − |
|---|---|---|---|
docs/DESIGN.md
|
M | +28 | -4 |