id: design: dynamic-loading exception policy — features that void a certified derived capability set

Part of the worlds design program: #5955. Wave-2 follow-up from the prior-art research (Lane B item 15); parent topic issue: #5958. Research source: workspace/scratch/worlds-capabilities-brief-2026-11-04/prior-art-research.md.

Scope

The derivation tool (sibling follow-up under #5955) is exact only because Roc user code has a closed, explicit call graph. Three proven derivation techniques (type inference, call-graph reachability, binary analysis) share one failure mode: reflection, dynamic dispatch, and dynamic loading break exactness.

Work

Enumerate the features that void certification in our stack (runtime loading of any kind, platform functions reached only through data-driven dispatch, FFI escapes, future Roc features as they land).
Registry treatment: how an uncertified library is marked, what the permission UX (permission-UX child of id: design program: worlds — advanced Roc libraries, capabilities, permissions, dynamic user functions, licensing (2026-11-04 brief) #5955) shows instead of a used-set ("uses: not derivable"), and whether uncertified libraries can be imported at all tiers or only with admin grant.
This is also the argument, recorded once, for forbidding those features in libraries whose capability set we certify.

Done looks like

A policy note: voiding-feature list, registry marking, tier treatment — referenced by the derivation-tool spec.

CODE-1666

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-i
Session / ID: task 10366
Found via: queue claim
Task: Triage issue id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000 — assigned_lane=opencode, handed off to opencode claimant per §1b; parked 1800s for claimant launch
Expectation: claimant launches bound opencode session to triage at current main
Links: n/a

🤖 Agent note · handed off

Agent: repo queue worker, lane code-c (repo-worker-code)
Session / ID: cron repo-queue-worker-shift-c run 2026-11-05 20:03 CST; task 10589
Found via: claimed task 10589 this shift; execution-lane assignment returned opencode
Task: task 10589 for issue id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000 (small_fix). Fresh check: issue id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000 is OPEN, no hard-stop labels (held / user/owned / do-not-merge / do-not-auto-edit). Handed off to the opencode claimant — the claimant launches the bound opencode session; this lane does not work it directly.
Expectation: claimant session drives task 10589 to a terminal state.
Links: task 10589 · issue id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-h
Session / ID: task 10589
Found via: queue claim
Task: Picked up task 10589 for issue id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000 (small_fix); execution lane assigned to opencode — handing off to the opencode claimant, which launches the bound session.
Expectation: claimant launches the bound opencode session and drives task 10589 to a terminal state
Links: issue id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-e
Session / ID: task 10589
Found via: queue claim
Task: Handed off task 10589 (small_fix) for issue id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000 to the opencode claimant — execution lane assigned opencode. Fresh check: issue id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000 OPEN, no hard-stop labels.
Expectation: claimant launches the bound opencode session and drives task 10589 to a terminal state
Links: issue id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000

Navigation Menu

Repository navigation

id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000

Scope

Work

Done looks like

97 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

id: design: dynamic-loading exception policy — features that void a certified derived capability set #6000

Description

Scope

Work

Done looks like

Activity

developing-today commented on Nov 5, 2026

dezren39 commented on Nov 5, 2026

97 remaining items

dezren39 commented on Nov 6, 2026

dezren39 commented on Nov 6, 2026

dezren39 commented on Nov 6, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions