Repository navigation
Closed
Labels
app/mcpxPackage/app: mcpx (pkgs/ or apps/ in this repo)Package/app: mcpx (pkgs/ or apps/ in this repo)effort/sSmall: expected under 2 hours of workSmall: expected under 2 hours of workkind/enhancementmeta/enrichedIntake review done: acceptance criteria, links, and normalized labels addedIntake review done: acceptance criteria, links, and normalized labels addedpriority/normalOrdinary priority (the default)Ordinary priority (the default)source/design-architectFiled by the repo design architect jobFiled by the repo design architect jobtask/triageQueue packet kind: verify, reproduce, and route this itemQueue packet kind: verify, reproduce, and route this item
Description
Phase 3 of design #2386 (mcpx completion, finished). Design doc: files/designs/code-mcpx-completion-rate-limit-ranking.md in the keep-the-four-repos-healthy goal workspace. GATED on Phases 1–2 of #2386 landing — do not start until both are closed.
Scope
Make the conformance register truthful about completion, in pkgs/mcpx:
internal/conformance/coverage_utilities.go: retire thecompletion-server-shouldgap to a covered row naming the Phase 1 limiter tests and Phase 2 ranking tests; movecompletion-securityto partial — rate limiting landed (Phase 1), input validation already existed, and the access-control / information-disclosure clause is recorded as waiting on principals mcpx: a principal per surface and a permission per operation, declared permissively #1968 / permissive-auth mcpx: the permissive auth interface authorizes everyone — real validation for the conformance rows that require refusal #1972 (do NOT mark it fully covered).- Correct the stale gap wording this pass's audit found: local matching was prefix-only (
hasPrefixFold), not "matched by substring" — the register text is fixed as part of the retirement, and the correction is noted on the design issue. - Update the
completion-server-shouldandcompletion-securitynotes indocs/spec/requirements.md(lines ~442/444) and the corresponding rows indocs/spec/conformance-matrix.md. - Post the evidence comment on design issue design(mcpx): completion, finished — one rate limit at the /v1 choke point, relevance-ranked local answers #2386 summarising what landed per phase. (mcpx: completion/complete over MCP ignores ref and never asks the upstream dezren39/darwin-nix#213, the gaps' origin, is CLOSED in nix — no cross-repo comment is owed; the evidence lives on design(mcpx): completion, finished — one rate limit at the /v1 choke point, relevance-ranked local answers #2386 and in the register.)
Acceptance
- Both gap entries in
coverage_utilities.goupdated as scoped above; conformance tests pass in CI -
requirements.md+conformance-matrix.mdnotes match the code's actual state (limiter settings named; security row partial with the mcpx: a principal per surface and a permission per operation, declared permissively #1968/mcpx: the permissive auth interface authorizes everyone — real validation for the conformance rows that require refusal #1972 reason) - Evidence comment posted on design(mcpx): completion, finished — one rate limit at the /v1 choke point, relevance-ranked local answers #2386; this issue's closure leaves design(mcpx): completion, finished — one rate limit at the /v1 choke point, relevance-ranked local answers #2386 ready for its own truth-up
Out of scope: implementing any access-control behaviour; touching any other gap row.
Metadata
Metadata
Assignees
Labels
app/mcpxPackage/app: mcpx (pkgs/ or apps/ in this repo)Package/app: mcpx (pkgs/ or apps/ in this repo)effort/sSmall: expected under 2 hours of workSmall: expected under 2 hours of workkind/enhancementmeta/enrichedIntake review done: acceptance criteria, links, and normalized labels addedIntake review done: acceptance criteria, links, and normalized labels addedpriority/normalOrdinary priority (the default)Ordinary priority (the default)source/design-architectFiled by the repo design architect jobFiled by the repo design architect jobtask/triageQueue packet kind: verify, reproduce, and route this itemQueue packet kind: verify, reproduce, and route this item
Activity
developing-today commentedon Oct 29, 2026
CODE-1216
dezren39 commentedon Oct 29, 2026
🤖 Agent note · filed by design architect
completion-securitymoves to partial with the mcpx: a principal per surface and a permission per operation, declared permissively #1968/mcpx: the permissive auth interface authorizes everyone — real validation for the conformance rows that require refusal #1972 access-control dependency recorded, never to fully covered. This phase's triage packet is enqueued in repo-health-code-pilot by the architect with status/blocked on the issue.dezren39 commentedon Oct 29, 2026
Intake review
Related: #2386 (design), #2387 (Phase 1), #2388 (Phase 2), #1968 / #1972 (the principals/permissive-auth work the security row waits on)
Notes: Phase 3 of the #2386 mcpx completion design; explicitly GATED on Phases 1–2 (#2387/#2388) closing first, and already labelled status/blocked for that gate. The body carries a full
## Acceptancechecklist, so this pass is labels-only. Register truth-up only — no behaviour change in scope.Risks: Marking completion-security fully covered would be a false claim: the access-control clause stays partial on #1968/#1972 by design; the retirement wording must keep that visible.
Suggested approach: Wait for #2387 and #2388 to close, then update the two register rows + requirements.md + conformance-matrix.md in one pass and post the evidence comment on #2386.
🤖 Agent note · filed
meta/enrichedapplied; acceptance criteria appended to the body only where no acceptance section existed (original body preserved verbatim above it). Still-live check this pass: no merged PR or fix commit explicitly resolving this issue was found in this pass's search.91 remaining items
dezren39 commentedon Nov 2, 2026
agent-note:v1 — state: parked at=2026-11-02T02:57:03Z (OpenChamber scheduled lane)
Merge pull request #4087 from developing-today/queue/5980-2389-comple…
dezren39 commentedon Nov 2, 2026
agent-note:v1
event: done
task: 5980
worker: repo-worker-code (lane A)
state: Completed via PR #4087, merged da39c0a. Register/docs truthed up; security row remains partial pending #1968/#1972.