You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Follow-on design ticket from #5683 — its decomposition sketch names this as a separate design, and the parent's acceptance requires these tickets to be filed and linked. Filed in the 2026-11-04 gap pass (WS-F) so the design work exists and can be prioritised on its own merits; implementation timing is a separate decision, possibly months out.
What this design must settle
Boundary definition, generic-activity gating, fail-closed behaviour, and break-glass for intranet-mode servers.
Context from the parent
The parent framework — Drew-ruled opt-in and framework-first — fixes how residency evidence, sanctions boundaries, and intranet mode are represented and enforced. The parent issue carries the surrounding decisions this ticket must not re-decide; where this ticket's answer would change a parent decision, record that explicitly rather than silently forking it.
Decision record expected
Close this design with a recorded decision (on this issue or in a doc/ record linked from it): the chosen shape, the alternatives rejected and why, and the invariants implementation must hold. If the design splits further, file the splits and link them here rather than growing this issue.
Relations
Parent: #5683. Programme: epic #2056. Filed by WS-F (2026-11-04 ID design gap & expansion pass).
🤖 Agent note · triage findings (task 10281, lane code-u, direct lane)
Verdict: VALID design ticket, correctly filed and linked — ACTIONABLE AS A DESIGN PASS in parallel with its siblings, per the parent's own triage ordering. Not superseded.
Parent issue design(id): residency & boundaries framework — opt-in evidence, sanctions, and intranet-mode capabilities #5683 is OPEN and was triaged today (task 10116, lane code-k). Its recorded ordering governs this ticket: the parent's remaining deliverable is the framework document, authored as a synthesis referencing the seven decomposition designs; where a decomposition design is still open, the framework states the shared vocabulary and leaves the surface detail to that ticket — it does not pre-empt them, and they are not blocked on it. Parent triage recorded: blockers none external, priority low, no Drew decision needed.
No intranet-mode decision record exists on current main (searched doc/ at 04f7869).
Ordering / next action (recorded per triage acceptance):
This design pass may proceed in parallel with its siblings. Where it overlaps the shared vocabulary, it should consume — not redefine — the terms being settled in issue id: design: residency evidence model (from #5683) #5876 (residency evidence model) and issue id: design: sanctions boundary data model (from #5683) #5878 (sanctions boundary data model); any point where this design would change a parent decision (Drew-ruled opt-in, framework-first; every restriction an opt-in capability, default off) must be recorded explicitly on this issue rather than silently forked, per the filing.
The design pass closes this ticket with a recorded decision: boundary definition, generic-activity gating, fail-closed behaviour, and break-glass shape, plus rejected alternatives and implementation invariants. Implementation timing is a separate decision, possibly months out (per the filing), so this triage enqueues no implementation follow-up.
Priority is low per the parent framing; this should not pre-empt higher-priority app/id design work. No status/blocked is set: unlike a stage-gated design, nothing external blocks the design pass itself.
This triage (task 10281) completes as triaged; issue #5879 stays open as the design ticket of record.
Activity
developing-today commentedon Nov 5, 2026
CODE-1562
dezren39 commentedon Nov 5, 2026
🤖 Agent note · picked up
dezren39 commentedon Nov 5, 2026
🤖 Agent note · triage findings (task 10281, lane code-u, direct lane)
Verdict: VALID design ticket, correctly filed and linked — ACTIONABLE AS A DESIGN PASS in parallel with its siblings, per the parent's own triage ordering. Not superseded.
Evidence (fresh, 2026-11-05):
doc/at 04f7869).Ordering / next action (recorded per triage acceptance):
app/iddesign work. Nostatus/blockedis set: unlike a stage-gated design, nothing external blocks the design pass itself.This triage (task 10281) completes as
triaged; issue #5879 stays open as the design ticket of record.dezren39 commentedon Nov 5, 2026
🤖 Agent note · done