- Shipped
- November 15, 2026 at 5:11 AM UTC
- Author
- Kamo
- Commit
- 5a14cc7
Owner rule 2026-11-14 supersedes the R7 rule (window anywhere, GD alone only in the platform org). godPassesRightChecks / useGodPassesRightChecks now answer GD (fail-closed only on a missing session), so checkRight/checkRole*, NavLayout, settings pins/topics and the member page pass god with no break-glass window. - ksemHasRight (LOS proxy) bypasses on GD, not on an open window. - Platform rights: withGodPlatformAccess gives GD every platform right on top of SecurityService's answer, client (PlatformRightsContext) and server (resolvePlatformAccess -> worldgenAuth, debug/cookies, spoken-lines). - PHI boundary switch and the lead field mask unmask on GD alone. - IoT overview/shared/device pages: view-only only in someone else's god window (useNonGodWindow), never in god's own. - The window stays as a marker: banner, countdown, break-glass menu item.