id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder)

What and why

Route builder and moderator authority through the session frames. Today the install and revoke frames do not carry a builder or moderator actor. Phase 12 (PR #801, F12.3) added the BUILDER/MODERATOR scope bits, invite --role builder|moderator, and the journal-only audit entries BuilderInstalled and Revoked { by }. But every caller passes by: None, so in practice a builder cannot install and a moderator cannot revoke over the wire, and the audit entries never appear. PR #801 lists "F12.3 install/revoke frame wiring" as remaining, and no issue tracks it.

Source

Phase 14 plan: F14.6 (PR docs(id): Phase 14 plan — close-out: finish, measure, verify, open the gates #834)
Phase 12 plan: F12.3
PR id: Phase 12 — world doctor + world.toml manifest (F12.16, F12.1) #801 body, "Remaining Phase 12": "F12.3 install/revoke frame wiring"
Epic id: Phase 12 designs to run through the research workflow #534, D1-021

Current status

Partial. pkgs/id/src/world/handle.rs:489 (revoke → revoke_by(participant_id, None)) and :648 (install_program → install_program_by(..., None, ...)) are the only callers of the _by variants outside tests. world/actor.rs:1192-1195 journals BuilderInstalled only when an actor is passed. The session code in world_session/ never passes one.

Acceptance criteria

The install-module frame accepts a participant holding BUILDER and passes the actor to install_program_by
The revoke frame accepts a participant holding MODERATOR and passes the actor to revoke_by
Over a real session (not the handle API), a builder installs, a moderator revokes, and a plain guest is refused for both with the documented F11.13 code
Each use is journaled with its actor (BuilderInstalled, Revoked { by })
Builder still receives no network, file, or process authority (test)

Size

M

Prerequisites

Define rollback compatibility for world profile journal entries #227: F11.12 journal format version (Phase 14 F14.1). BuilderInstalled is a new entry type, and it must be covered by the version contract before it is produced in practice.

docs(id): Phase 14 plan — link F14.6 to #835 and the plan PR #834

Intake review

Still live: verified on current main (a2eef6f) — pkgs/id/src/world/handle.rs:489 still calls revoke_by(participant_id, None) and :648 still calls install_program_by(..., None, ...); the session code in world_session/ passes no actor. The issue already carries a full acceptance-criteria section, so this pass only normalized labels — body untouched.

Related: PR #801 (F12.3, merged — lists this wiring as remaining), #534 (epic), #227 (F11.12 journal-format prerequisite named in the issue — BuilderInstalled is a new journal entry type).

Notes / risks: gated on #227 in practice: producing BuilderInstalled entries before the journal version contract covers them would create the format problem #227 exists to prevent. Sequence accordingly.

Suggested approach: wire the actor through the two session frames once #227's contract covers the entry types; the over-a-real-session test in the criteria is the right verification shape.

🤖 Fleet monitor intake enrichment — labels normalized and meta/enriched applied this pass (acceptance criteria already present).

🤖 Agent note · picked up

Agent: repo-worker-code (openchamber scheduled lane)
Task: queue task 2259; revalidate authority frame wiring and ownership.

agent-note:v1
state: parked
queue: repo-health-code-pilot
task: 4858 (small_fix, worker repo-worker-code, lane 8ac61616-3815-4e7b-b33d-840a3829154a)
by: openchamber-scheduled-lane
at: 2026-11-04T02:18:30Z

Parked 30 minutes because task-bound PR #4535 remains OPEN and the issue's current ownership notes identify it as Drew-authored/open draft. This lane did not inspect the PR, change code, or create competing work. Resume only after #4535 closes/merges or ownership is explicitly reassigned, then revalidate #835 and design gate #3826.

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-e
Session / ID: task 4858
Found via: queue claim
Task: task 4858 for issue id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835 (small_fix) — execution lane assigned opencode
Expectation: the laptop claimant launches the bound opencode session, which drives task 4858 to its terminal state
Links: issue id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835

🤖 Agent note · picked up

Agent: queue worker (repo-worker-code), lane 1a180ae5-384f-4e71-8d77-08f7b1652c75 (OpenChamber scheduled lane)
Session / ID: task 4858 (queue repo-health-code-pilot)
Found via: OpenChamber scheduled lane claim
Task: Resume task pm-stack(aggregator): dnsSectionFromRegisterJson accepts impossible renewal dates (2027-02-30, 2026-13-01) — the #2199 fix covered only the Markdown register path #4858 for builder/moderator session authority in id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835.
Prior progress: This task is bound to open draft PR feat(id): #835 phase 1 journal gate for builder audit #4535, authored by Drew; prior note says not to inspect, modify, merge, or compete while it remains Drew-owned.
Expectation: Revalidate issue and PR state fresh; if the protected draft remains open, park and preserve the existing branch/worktree without touching it.

🤖 Agent note · parked

Agent: queue worker (repo-worker-code), lane 1a180ae5-384f-4e71-8d77-08f7b1652c75 (OpenChamber scheduled lane)
Session / ID: task 4858 (queue repo-health-code-pilot)
Found via: OpenChamber scheduled lane claim
Task: Resume id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835 builder/moderator session authority fix.
Reason: Fresh GitHub state confirms task-bound PR feat(id): #835 phase 1 journal gate for builder audit #4535 is OPEN/DRAFT, authored by Drew (dezren39), at e33a4e4a3ee701563b6eea9ddae6fd1ac63ac48c. This is a hard-stop ownership restriction; no diff inspected and no work touched. Design gate PR design(id): #835 builder and moderator session frames #3826 is already merged.
Resume condition: Parked until 2026-11-04T07:24:10Z. Resume only after PR feat(id): #835 phase 1 journal gate for builder audit #4535 closes/merges or ownership is explicitly reassigned; then revalidate id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835 and design(id): #835 builder and moderator session frames #3826 before continuing. Existing branch/worktree /home/user/git/fleet/4858 is preserved.

agent-note:v1
{"kind":"handoff","task":4858,"lane":"code-v","execution_lane":"opencode","state":"parked","note":"task 4858 handed off to opencode claimant by lane code-v. Fresh revalidation: issue #835 OPEN; task-bound PR #4535 OPEN/DRAFT at e33a4e4, authored by Drew (dezren39) — ownership hard stop, PR/branch untouched, no competing work. Prior implementation preserved on branch queue/4858-835-session-authority. Resume only after PR #4535 closes/merges or Drew releases ownership."}

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-i
Session / ID: task 4858
Found via: queue claim (re-claim after prior handoff lease expiry)
Task: Re-handed task 4858 to the opencode execution lane; the laptop claimant launches the bound opencode session for issue id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835 (builder/moderator session authority).
Expectation: claimant session drives task 4858 to a terminal state.
Links: issue id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-i
Session / ID: task 4858
Found via: queue claim (re-claim after prior handoff lease expiry)
Task: fix for issue id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835 handed off to the opencode execution lane; the laptop claimant launches the bound opencode session
Expectation: claimant session drives task 4858 to its terminal state
Links: issue id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835

Navigation Menu

Repository navigation

id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835

What and why

Source

Current status

Acceptance criteria

Size

Prerequisites

Intake review

266 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

id(world): F14.6 builder and moderator authority through session frames (F12.3 remainder) #835

Description

What and why

Source

Current status

Acceptance criteria

Size

Prerequisites

Activity

dezren39 commented on Oct 26, 2026

Intake review

dezren39 commented on Nov 1, 2026

266 remaining items

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions