aro_config caller field unauthenticated - light-scope hardening

Sub-tickets

Questions

Activity

• system created · 2026-05-23
  wi cli
• system note · 2026-05-23
  Verified 2026-05-23-03:14: POST /aro_config trusts request-body caller field. Any registered agent can claim caller=elazar-the-user-human-llmmsg-srv and flip any ARO PM. Per Elazar (mphykzheefsf): keep simple and light - all CCs run on Elazar's machines, goal is preventing accidental/buggy flips, not adversarial. Brainstorm later. Stub options: loopback-only POST; log-and-DM-Elazar on every flip; require caller match registered session.