@openvtc/trust-tasks 0.23.3 → 0.23.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -11,6 +11,35 @@ The package versions over **its own API** — what a consumer compiles against
|
|
|
11
11
|
not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
|
|
12
12
|
component.
|
|
13
13
|
|
|
14
|
+
## 0.23.4 — 2026-10-03
|
|
15
|
+
|
|
16
|
+
|
|
17
|
+
### Documentation
|
|
18
|
+
|
|
19
|
+
- **git-ns**: Single-administrator mode may waive the self-grant rule (#725)
|
|
20
|
+
|
|
21
|
+
Fixed rule 7 of git-ns/right/grant 0.3 named break-glass as the one way
|
|
22
|
+
an actor records an elevated right for themselves. In a community run by
|
|
23
|
+
one person there is nobody to make those grants or to ratify a
|
|
24
|
+
break-glass, so the rule left its administrator unable to own what they
|
|
25
|
+
create or adopt, or to reseat a namespace to themselves.
|
|
26
|
+
|
|
27
|
+
Add a narrowly scoped exception in git-ns/right/grant 0.3 (new section
|
|
28
|
+
"The single-administrator waiver"): a VTC its host operator has
|
|
29
|
+
configured for single-administrator operation (a host-level setting
|
|
30
|
+
outside community policy; VTI-APV-022 in the VTI specification) MAY
|
|
31
|
+
waive rule 7 for one operation when no other party is eligible to make
|
|
32
|
+
the grant. When it does it MUST require an operation-bound step-up,
|
|
33
|
+
MUST record a highest-severity audit event before the record (refusing
|
|
34
|
+
if it cannot), and MUST mark the record and the response (payload ext);
|
|
35
|
+
the record counts toward the last-owner and last-admin invariants. With
|
|
36
|
+
any other eligible party the rule applies unchanged.
|
|
37
|
+
|
|
38
|
+
repo/create 0.3, namespace/reseat 0.3 and drift/resolve 0.3 refer to
|
|
39
|
+
the waiver where they apply rule 7. Prose only, in place on draft specs
|
|
40
|
+
(SPEC 5.2); no schema change, since every affected response already
|
|
41
|
+
carries the open ext member.
|
|
42
|
+
|
|
14
43
|
## 0.23.3 — 2026-10-03
|
|
15
44
|
|
|
16
45
|
|