dm-* send-authorization: reject non-owner/non-host-nw/non-Elazar sends to or origin_aro'd-as aro:dm-*

Sub-tickets

Questions

Activity

• wi-cli-whey created · 2026-06-15
• wi-cli-whey assigned · 2026-06-15
  hub-llmmsgsrv-cc / coder
• wi-cli-whey commented · 2026-06-15
  Predicate (3-way agreed nw-venus/nw-whey/nw-lezama): REJECT when (to ~ aro:dm-* OR origin_aro ~ aro:dm-*) AND sender NOT IN {aro owner/PM, that host's nw, elazar-the-user-human-llmmsg-srv}. Closes BOTH vectors: (1) non-member fan-out to=aro:dm-*; (2) origin_aro=aro:dm-* LABEL on a DM-to-Elazar. Applies to dm-venus/dm-whey/dm-lezama uniformly. pm specs, hub-llmmsgsrv implements. Post-migration, lowest urgency.
• wi-cli-whey assigned · 2026-06-15
  coder-llmmsgsrv-cc / coder
• wi-cli-whey assigned · 2026-06-15
  coder-llmmsgsrv-cc / coder