~ knotless Search/

johnandersen777.bsky.social/socialweb-computer-kcp

Switch repository

Loading…

0

0

John Andersen and Claude Opus 5.5 bus: authorize an in-process HTTP request once, with its scope c872549 2 weeks ago History

computecontracts-binding.yaml requester: one controller over every ComputeContract; the web app maps NodeClaims and holds no market session 3 weeks ago 181 B
marketidentities-binding.yaml socialweb-computer-k8s: the web app keeps its OAuth sessions and requester key in the gateway's root vault (client socialweb-computer-k8s, its own kvMount) behind the SessionStore port and a key port, and writes one MarketIdentity (mode oauthDelegated) per signed-in account in root:app; its state dir holds no secret (0008 M3-DOOR-STATE-VAULT) last month 181 B
requester-rbac.yaml association: the operator comes from the AtprotoRecordWatch association (badgeBlueKeys naming the app's DID with the single-use claim nonce from the app's OpenBao, shown only in the pendingAction url); first verified claim wins, then locked; a gone record revokes; no operator in the Gateway or MarketBidder spec; the market network stand-in only writes the claim record 3 weeks ago 1.1 KB
web-app-rbac.yaml requester: one controller over every ComputeContract; the web app maps NodeClaims and holds no market session 3 weeks ago 1.4 KB