SP00-T14 ruling — a session-less kill-switch read is the interceptor's 403
SP00-T18 ruling — a socket turn runs in a persistence context, and a revoked tab stops receiving answers
The chat picker lists only the models the member may pick
The picker read the administrator's model list (403 without MANAGE_AI_MODELS) and offered providers, which never selected a model. It now reads GET /api/ai/mode...
SP00-T14 ruling — shared-lib pin restored to one version (1.6.1) before the securityservice push
Pin kamo-shared-library 1.6.1, the version the library stays at
1bb9801 pinned 1.6.2 together with the library bump in db737a54. That bump is reverted, because about thirty services pin 1.6.1 and each build can only resolve ...
Pin kamo-shared-library 1.6.1, the version the library stays at
39829f6 pinned 1.6.2 together with the library bump in db737a54. That bump is reverted: about thirty other services pin 1.6.1, and CI can only resolve the one v...
Keep kamo-shared-library at 1.6.1, the one version every consumer can resolve
db737a54 moved the library to 1.6.2, and only emailservice and initializerservice moved with it. About thirty other services pin 1.6.1. Their CI clones this rep...
SP00-T17 ruling — the ownership rule and both pin call sites get their own tests
Own NATS login, Redis login, KamoAI secret; host the LOS webhook worker
Migration for org_alias_domains, seeding the platform org's two
Creates **************** and seeds the platform org (is_top_level) with kamouniverse.com (default, carrying forward the old hardcoded platform.mail.domain) and ...
Read the composer's alias-domain default from org_alias_domains
**************** used one hardcoded domain (platform.mail.domain, kamouniverse.com) as a synthetic send-as default, and only for the platform org **************...
Add org_alias_domains, the per-org form of the platform mail domain
Generalizes the single hardcoded platform.mail.domain (kamouniverse.com, and only for the platform org) into a table any org can hold any number of rows in. Ema...
SP00 T16 ruling — the AIService chain also turns logout off, and a wiring test proves the chain
SP00 T12 ruling — the administrator test also proves the service was asked
SP00 T51A rulings — dispatch tests, and the Step 7 audit carves the pre-existing internal subtrees
KamoAI internal endpoints never leave the gateway
Carves the seven KamoAI internal subtrees (master spec §7 item 13) out of the wildcard forwards, and with them the server-to-server endpoints that predate the p...
SP00 T39 ruling — the rights mirror guard also requires every AI Workforce right
The AI Workforce app and its four rights; the app-mirror guard reads Java again
Capabilities come from the shared seat rule the servers enforce
EntitlementService reads the seat facts and asks SeatCapabilityRules for the decision, then maps it onto the unchanged MemberCapabilities wire shape, so the con...
SP00 T15 ruling — AiCaller reads the platform flags through SessionPlatformFacts and never throws
SP00 Task 32 ship ruling — the sign-in check is proven from real signed-in traffic through the new gateway pods
A private inbox prefix for new services, and the LOS webhook worker is opt-in
SP00 T9 ruling — SharedRedisConfig wiring tests and an accurate helper Javadoc
Services log in to Redis with a username and password when given one
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.