- Shipped
- October 15, 2026 at 6:15 AM UTC
- Author
- Kamo
- Commit
- 52a1811
Owner 2026-10-15, refined the same day: "It should apply to any team member. But just because a team member (human or SI) has more rights, does not mean that automatically means the SI they are talking to assume their rights. It has to be a direct request or anything similar to an order. Otherwise, the SI should reinforce they do not have that level of privilege." One delegation point (OrderDelegation): for an SI's call or tool list in a run, the order is the request the SI cited, else the message or task that woke the run, verified as SP95's requests are (team chat or task only, addressed to the SI, within the hour, among the run's wakes, no outside content read), by any team member, a person or another SI (RequestVerifier.verifyOrder / inferOrderFromRun), and only when its words are an order (DirectOrder) or it is a task assigned to the SI. SecurityService then mints the SI an order-scoped *** for the run; the call runs as the same SI with that principal, so the rights check here and every downstream service see the union. A question, news or chat lends nothing, and the RIGHTS refusal then tells the SI to say plainly it lacks that level of access. - Disclosure (CP07): the run reads for the requester (OrderPrincipal), and onward sharing carries the requester's VERIFIED_REQUEST grant, judged by their own release authority. - Audit: authority_basis REQUESTED_BY_TEAM_MEMBER_ORDER, on_behalf_of_member_id, borrowed_rights (DDL **************** applied). - tools/list names the order in _meta[com.kamocrm/orderedBy] so the runtime never keeps that list. - An order-scoped session presented for any other run is no session; nothing is lent on a lent session. - Unchanged: the kill switch and pauses at the door, the charter, the risk ceiling, PHI, limits, the outreach gate and the do-not-contact list. Tests: ToolCallPipelineOrderTest (13; 9 RED without the delegation point), DirectOrderTest, OrderPrincipalTest, RequestVerifierTest (+2), CallerContextFactoryTest (+1); with ToolCallPipeline*, McpServerController*, AudienceFilter*, ReadAudience*, DisclosureGate*, *Audit*, ToolListParity*, PhonePack*, *Coverage*: 300+ green.