From be264026b5dc66e38f245239f4c7c0c82caaadde Mon Sep 17 00:00:00 2001 From: jochen Date: Fri, 13 Nov 2026 23:59:02 +0100 Subject: [PATCH] Answer A-381: grants' own account may list stream names, which its stream assertion starts with Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h --- 03-DESIGN/01-to-be/47-milestones/G-22-lead-answers-2.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/03-DESIGN/01-to-be/47-milestones/G-22-lead-answers-2.md b/03-DESIGN/01-to-be/47-milestones/G-22-lead-answers-2.md index 0f63f70d..6bef9ed9 100644 --- a/03-DESIGN/01-to-be/47-milestones/G-22-lead-answers-2.md +++ b/03-DESIGN/01-to-be/47-milestones/G-22-lead-answers-2.md @@ -810,3 +810,8 @@ the principle that settles it, cited as "design 47 G A-n". binding of that local name, the runner reaches the store under the name grants creates for a module's old `objects` entry, `_` (stream `OBJ__`); the bus's grants to the module's account decide whether it may, and a refusal is said with the store's name. +- **A-381** (live start, novox 23:42-23:58: grants is "Permissions Violation for Publish to $JS.API.STREAM.NAMES" while the + loaded list grants it STREAM.CREATE/INFO of each kept seat stream, so its assertion of the seats' kept events never + reaches the create and SEAT_mesh-conditions_findings-asked stays missing; every bundle with a finding writer exits; + principle 7) Grants' own account carries `$JS.API.STREAM.NAMES` (the read its assertion of kept streams starts with), + composed with the create rights of A-364.