- Shipped
- October 5, 2026 at 4:42 AM UTC
- Author
- Kamo
- Commit
- 0cce8e7
KamoCollab CP02 Task 6A (master R1-23, CP-D75). SecurityService publishes **************** after every org-graph write; each service that caches the org graph evicts on it. No NATS user could subscribe to the subject, so every listener would have hit a Subscription Violation and its cache would have evicted only by the 60 s TTL. Adds "security.orggraph.changed.>" to the subscribe allow list of the nine listener users: svc_security, svc_media, svc_kamoai (CP02), svc_kb, svc_email, svc_voip, svc_docs (CP05), svc_mcpgateway (CP07) and svc_rag (CP11). svc_docs subscribed to nothing (deny ">"); it now may subscribe to that subject alone. No password hash, publish list or other user changes.