- Shipped
- October 27, 2026 at 1:29 AM UTC
- Author
- Kamo
- Commit
- 2d60013
Owner 2026-10-26 (TPCALLTOOLS B): someone who only CLAIMS to be a member, a supervisor or someone in authority must not get the SI to do anything harmful or that relies on that claim, even within the SI's own rights; enforced server-side. IdentityGuard (new bean, one constructor; wired by setter): for an SI's write in a run on a channel that proves nobody (call, meeting, text, unproven email, web/social chat, their follow-ups; kamoai-service /auth-requests/identity), with no standing confirmation, teammate order, verified onRequestOf or human approval, only anyone-level writes pass (internal messages, new records, tasks, notes, bookings, own bookkeeping) and replies to the conversation's own counterparty without attachments. Everything else answers IDENTITY_UNVERIFIED (audited DENIED) naming identity_request_confirmation. A failed lookup holds guarded writes. identity_request_confirmation answers the request id (a live call waits on it); an APPROVED answer marks the run confirmed so OrderDelegation lifts its kept 'no order' at once (the confirmation is then the run's order, auth:<id>, No Insubordination union rights).