Internal auth and charter access rules

Shipped

September 27, 2026 at 9:10 AM UTC

Author

Kamo

Commit

ed2aac2

CharterInternalAuth applies SP02's KamoaiInternalAuth rule to the same secret, so the per-handler guard and the prefix interceptor cannot disagree. CharterAccess keeps SUPERVISE_AI_MEMBERS (alone or with MANAGE_AI_WORKFORCE) to AI targets, as master 6.3 scopes it (ruling SP03-T13).