- Shipped
- October 18, 2026 at 4:42 PM UTC
- Author
- Kamo
- Commit
- 4fd2968
SITP TP00, owner decisions 2026-10-18: - reports_list, reports_run and metrics_get drop CP14's WATCH charter switch: an SI is offered them by VIEW_REPORTS and the Reports app, as a person is, whatever its WATCH items or its org's disclosure mode. - config_* are no longer HUMAN_ONLY: they are offered by their rights, and SecurityService's ConfigureAccess checks the same rights per subject and change. Their four rights are on the SI floor, so charters and SI configuration stay a person's in practice. - ToolVisibility reads an SI's rights less AiRightsFloor.NEVER_GRANTABLE (defence in depth): a floor right in an SI session opens no tool. Snapshots regenerated: the AUDIT/default SI lists gain exactly the three report tools; nothing else changes.