An SI on god's order sees and can ask for god's devices (IoT R7, No Insubordination Rule)

Shipped: October 19, 2026 at 12:21 AM UTC
Author: Kamo
Commit: 4e2b3bb

IotViewRules: an SI's manifest whose caller block names god's standing (caller.god PLATFORM | BREAK_GLASS) and the requester (caller.godOnOrderOf) keeps SAFETY_CRITICAL functions (V6) and those above the SI class ceiling (V11), only on the order-scoped session of that very requester's order (IotManifestClient hands the session's delegation.requesterMemberId). Every other rule stays; a person's view and an SI's own session never read the fields. IotCallerView carries the GodOrder. IotPack.planSend asks a SAFETY_CRITICAL function under OPERATE_SECURITY_DEVICE, as SECURITY. The tool catalogue's declared classes are unchanged.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing