Skip to content

id: design: intranet-mode servers (from #5683) #5879

Open

Description

@dezren39

Summary

Follow-on design ticket from #5683 — its decomposition sketch names this as a separate design, and the parent's acceptance requires these tickets to be filed and linked. Filed in the 2026-11-04 gap pass (WS-F) so the design work exists and can be prioritised on its own merits; implementation timing is a separate decision, possibly months out.

What this design must settle

Boundary definition, generic-activity gating, fail-closed behaviour, and break-glass for intranet-mode servers.

Context from the parent

The parent framework — Drew-ruled opt-in and framework-first — fixes how residency evidence, sanctions boundaries, and intranet mode are represented and enforced. The parent issue carries the surrounding decisions this ticket must not re-decide; where this ticket's answer would change a parent decision, record that explicitly rather than silently forking it.

Decision record expected

Close this design with a recorded decision (on this issue or in a doc/ record linked from it): the chosen shape, the alternatives rejected and why, and the invariants implementation must hold. If the design splits further, file the splits and link them here rather than growing this issue.

Relations

Parent: #5683. Programme: epic #2056. Filed by WS-F (2026-11-04 ID design gap & expansion pass).

Activity

  1. added
    app/idPackage/app: id (pkgs/ or apps/ in this repo)
    on Nov 5, 2026
  2. developing-today commented on Nov 5, 2026

    @developing-today
    Contributor
  3. added
    queue/queuedHas a queued task in the Supabase agent queue
    task/triageQueue packet kind: verify, reproduce, and route this item
    work/assignedQueue worker lifecycle state
    queue/claimedQueue worker lifecycle state
    and removed
    queue/queuedHas a queued task in the Supabase agent queue
    on Nov 5, 2026
  4. dezren39 commented on Nov 5, 2026

    @dezren39
    MemberAuthor

    🤖 Agent note · picked up

  5. dezren39 commented on Nov 5, 2026

    @dezren39
    MemberAuthor

    🤖 Agent note · triage findings (task 10281, lane code-u, direct lane)

    Verdict: VALID design ticket, correctly filed and linked — ACTIONABLE AS A DESIGN PASS in parallel with its siblings, per the parent's own triage ordering. Not superseded.

    Evidence (fresh, 2026-11-05):

    Ordering / next action (recorded per triage acceptance):

    • This design pass may proceed in parallel with its siblings. Where it overlaps the shared vocabulary, it should consume — not redefine — the terms being settled in issue id: design: residency evidence model (from #5683) #5876 (residency evidence model) and issue id: design: sanctions boundary data model (from #5683) #5878 (sanctions boundary data model); any point where this design would change a parent decision (Drew-ruled opt-in, framework-first; every restriction an opt-in capability, default off) must be recorded explicitly on this issue rather than silently forked, per the filing.
    • The design pass closes this ticket with a recorded decision: boundary definition, generic-activity gating, fail-closed behaviour, and break-glass shape, plus rejected alternatives and implementation invariants. Implementation timing is a separate decision, possibly months out (per the filing), so this triage enqueues no implementation follow-up.
    • Priority is low per the parent framing; this should not pre-empt higher-priority app/id design work. No status/blocked is set: unlike a stage-gated design, nothing external blocks the design pass itself.

    This triage (task 10281) completes as triaged; issue #5879 stays open as the design ticket of record.

  6. dezren39 commented on Nov 5, 2026

    @dezren39
    MemberAuthor

    🤖 Agent note · done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

app/idPackage/app: id (pkgs/ or apps/ in this repo)task/triageQueue packet kind: verify, reproduce, and route this item

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions