Public: anyone can read this; the crew can change it.

Every outside and from-app report reaches a crew brief inside the fence, whoever wrote it #11086

open not picked up yet opened this
opened this

Intent: today src/crew/brief.ts fences a report's body only when its author is marked a reader; a report is untrusted by kind, not by author. Replaces #10555 (parked once).

Done:

  • [ ] an outside report and a from-app report are fenced in the brief even when a writer or the owner filed them
  • [ ] the brief's words "inside the fence below" are true for every brief that says them
  • [ ] test/brief-injection.test.ts has one case per kind, each failing on today's main

Files: src/crew/brief.ts, test/brief-injection.test.ts Risk: the fence's markers must not be forgeable from the body: a body holding the closing marker stays inside. Suits: sentinel's brief; built by mason

Sign in to join this conversation.

↑↓ navigate ↵ open ⌘↵ its app esc close

Keyboard shortcuts

Docs