task-62: record the agent hand reach landing (souveraine f87d912)
The body tool now speaks the usbHands IPC; the gates stay as refusals, and what still binds is the authority seam itself, not her verbs.
This commit is contained in:
parent
3cdd36ff2f
commit
cdbb744466
1 changed files with 11 additions and 0 deletions
|
|
@ -122,6 +122,17 @@ Sam's proposed privileged `smoo-host` D-Bus service is the host-side mirror of
|
|||
this boundary, not its replacement: smoo owns export mechanics; Session
|
||||
Authority owns whether this peer, export and moment are allowed.
|
||||
|
||||
### Agent reach landed — 2026-08-15 (`souveraine f87d912`)
|
||||
|
||||
The body tool now carries a `hand` verb that speaks the `usbHands` IPC directly
|
||||
(quickshell remains the one owner of the gadget; the tool adds no writer). She
|
||||
can ask `body hand status` before the surface is joined, and `type`/`key`/
|
||||
`click`/`pointer` once it is. The intended rule above is now partly real: the
|
||||
agent has the verbs and the gates — locked glass, unjoined surface, unarmed
|
||||
mode — come back as refusals she can read and open, never as her own limits.
|
||||
What still binds is the authority seam itself: no credential/known-peer gate on
|
||||
the mode change, and the direct usb-signaller D-Bus bypass is still open.
|
||||
|
||||
## Management tether — one owner, hardware proof still owed
|
||||
|
||||
Live inspection on 2026-08-07 found and removed the last obsolete static
|
||||
|
|
|
|||
Loading…
Reference in a new issue