Repository navigation

Restrict update calls to canisters an app declares (service discoverability) - #166

Merged

aterga merged 21 commits into

mainfrom

claude/discoverability-protocol-restrictions-njf4x3

Sep 1, 2026

Merged

Restrict update calls to canisters an app declares (service discoverability)#166
aterga merged 21 commits into
mainfrom
claude/discoverability-protocol-restrictions-njf4x3

Commits on Aug 28, 2026
Commits on Aug 31, 2026
- Drop the ai-connect.html discovery source
  claude
  committed
  150dceb
- Merge origin/main into the discoverability branch
  claude
  committed
  b7818b1
- Stop the legacy manifest path from authorizing writes
  claude
  committed
  32b23f3
- Merge origin/main into the discoverability branch
  claude
  committed
  a18b069
- Document that only the standard path authorizes a write
  claude
  committed
  b8f180e
- Bind the app manifest to the identity the write is signed as
  claude
  committed
  de33594
- Fail closed on the Layer 5 format, transient statuses and declared_at
  claude
  committed
  af3fa2b
- Keep a failed read from reading as an absent declaration
  claude
  committed
  7c738c6
- State the two limits of the ownership gap outright
  claude
  committed
  c1eba4b
- Detect a truncated read, and say what overflow means per document
  claude
  committed
  1c778bc
- Cover the gate against a real adopter, and fix the failure classifier
  claude
  committed
  e118854
- Correct two doc comments the fail-closed change left behind
  claude
  committed
  7aed865
- Key the known-app fallback on the origin, not the bare host
  
  sea-snake
  and
  claude
  committed
  681a115
- Pin the identity probes to the origin that was probed
  
  sea-snake
  and
  claude
  committed
  c3f853a
- Pin the origin before reading the status, and on the discovery probes
  
  sea-snake
  and
  claude
  committed
  5b41339
- Pin the authorization list to the origin that was probed
  
  sea-snake
  and
  claude
  committed
  0eac148

Navigation Menu

Repository navigation

Restrict update calls to canisters an app declares (service discoverability) - #166

Restrict update calls to canisters an app declares (service discoverability)#166
aterga merged 21 commits into
mainfrom
claude/discoverability-protocol-restrictions-njf4x3

Commits on Aug 28, 2026

Restrict update calls to canisters an app declares (service discoverability)

Harden the discoverability gate: redirect pinning, safe echoes, honest refusals

Hold a declared id to the protocol's canister-principal rule

Merge remote-tracking branch 'origin/main' into claude/discoverability-protocol-restrictions-njf4x3

Point the no-manifest refusal at the served how-to skill

Commits on Aug 31, 2026

Drop the ai-connect.html discovery source

Merge origin/main into the discoverability branch

Stop the legacy manifest path from authorizing writes

Merge origin/main into the discoverability branch

Document that only the standard path authorizes a write

Bind the app manifest to the identity the write is signed as

Fail closed on the Layer 5 format, transient statuses and declared_at

Keep a failed read from reading as an absent declaration

State the two limits of the ownership gap outright

Detect a truncated read, and say what overflow means per document

Cover the gate against a real adopter, and fix the failure classifier

Correct two doc comments the fail-closed change left behind

Key the known-app fallback on the origin, not the bare host

Pin the identity probes to the origin that was probed

Pin the origin before reading the status, and on the discovery probes

Pin the authorization list to the origin that was probed