SikongJueluo
4ca585c915
- analyze whether the proposed JudgeRequestV1 mixes evidence, adapter data, and transport metadata - add Judgment Evidence and Execution Working Directory terms to CONTEXT.md - ignore .workspace/ directory
2.5 KiB
Permission Authorization
This context describes how ambiguous coding-agent operations are reviewed before they may execute.
Language
Deterministic Permission Policy: The rule-based authority that classifies an operation as allowed, denied, or requiring a decision. Avoid: Static judge
Authorization Judge: An independent reviewer that proposes a verdict for an operation the Deterministic Permission Policy could not decide. Avoid: Bash parser, safety classifier
Shadow Mode: An observation mode in which an Authorization Judge records a verdict without changing whether the operation executes. Avoid: Dry run
Enforce Mode: An authority mode in which an Authorization Judge's allow verdict may approve an operation. In the initial rollout, deny and defer still pass to the next authority. Avoid: Production mode
Judge Participation: The presence of an Authorization Judge in the configured authorizer chain. Participation determines whether the Judge is consulted, independently of whether it is in Shadow Mode or Enforce Mode. Avoid: Enabled, installed
Defer: A verdict stating that the available information or the judge itself is insufficient to decide, leaving the decision to the next authority. Avoid: Deny, error
False Allow: A Shadow Mode outcome in which the Authorization Judge proposes approval and the human reviewer rejects the same permission request. Avoid: False positive
Requesting Session: The session in which the operation requiring authorization originated. For a forwarded request, this is the child session. Avoid: Current session
Serving Session: The authority-bearing session that resolves a forwarded request and runs its configured Authorization Judge before the terminal human authority. Avoid: Parent context, current session
Conversation Owner: The session whose conversation entries are supplied to an Authorization Judge. It may differ from the Requesting Session for forwarded requests. Avoid: Requester
Judgment Evidence: The minimal operation, execution, user-intent, and forwarded-provenance facts supplied to an Authorization Judge for one verdict. Adapter validation state and review-log metadata are not Judgment Evidence. Avoid: Judge request, full request context
Execution Working Directory: The working directory of the Requesting Session in which an operation will execute and relative paths are resolved. For a forwarded request, it must not be replaced with the Serving Session's working directory. Avoid: Current cwd, parent cwd