- Shipped
- October 15, 2026 at 6:14 AM UTC
- Author
- Kamo
- Commit
- ae755f6
Owner 2026-10-15, refined the same day: any team member (a person or another SI) who gives an SI a direct order lends it their rights for the work that carries it out; talking with the SI lends nothing. POST **************** (KAMOAI internal secret) mints the SI an order-scoped *** for one run: its own rights UNION the requester's, less the SI floor (AiRightsFloor) and the SI's own explicit NUKE rows, closed over the rights hierarchy. A person lends their live session rights; an SI lends its standing rights only, computed from its rows, so nothing is lent on transitively. The session is the SI's own (memberID, actorType AI), lives 15 minutes, carries a delegation block {basis REQUESTED_BY_TEAM_MEMBER_ORDER, requesterMemberId, runId, orderRef, borrowedRights}, and starts nothing a sign-in starts. The exchange's stops (kill switch, org pause, the SI's pause or retirement, an inactive membership, no supervisor) refuse it, and are read again once it exists. A rights change of the SI ends such a session instead of rewriting it. The SI's standing session never gains a right. Tests: OrderDelegationServiceTest (8), KSessionServiceIdentityTest (12), AiSessionExchangeServiceTest, AiRightsChangeListenerTest, PostAuth****: 51 green.