fix: allow read-only dispatcher status in completed result turns #211

Merged

harness-promotion merged 1 commit from fix/minato-result-status-authority into main

2026-11-01 20:23:16 +00:00

karsten commented

2026-11-01 20:04:05 +00:00

Owner

Fixes Minato result-turn authority_revoked on read-only dispatcher status. Leaves host provenance, parent-scoped lookup and productive orchestration guards intact. Reproduced failing regression before fix; nine focused tests pass including real PI hooks and exhaustion/revocation coverage. Native consumer acceptance required after managed rollout.

karsten added 1 commit

2026-11-01 20:04:06 +00:00

fix: allow read-only dispatcher status in completed result turns 3e2bbf396a

harness-integrator approved these changes

2026-11-01 20:07:24 +00:00

harness-integrator left a comment

Minato authority fix delivery

Independent security review

Candidate: 3e2bbf396aaaaeb64958b1266348872efb85d2e5; base: 53e069f534ebe4a5dd39f155a032a8507d81497f; core PR211.
Verdict: APPROVED. No P0/P1 findings. Exact two-file diff inspected. Strict plugin_dispatch/status exception supplies no productive mandate; submit/cancel/retry and other orchestration remain denied.
src/cli.ts:293-303 still checks worker guard and host provenance via resultAllowed before calling changed guard; plugin policies still run afterward. dispatcher-runtime.ts:38-40 requires completed same-parent execution and non-stopped parent. Dispatcher plugin uses store.list(context.sessionKey) for status, excluding foreign results.
Independent rerun: 9 focused result/budget/real-PI-hook tests passed; 12 dispatcher-host tests passed; 1 dispatcher status bounds test passed (including foreign-session denial and no authority-token disclosure). Initial status-test invocation lacked generated plugins; normal locked materialization resolved it, then test passed.
Cross-vendor independence unavailable as handed off by parent; independent reviewer uses same backend/model family. Not claimed cross-family.
Review source was not modified. Generated plugin files are ignored build inputs.

Independent source review approved; integration, image and consumer acceptance are separate pending stages.

# Minato authority fix delivery ## Independent security review - Candidate: `3e2bbf396aaaaeb64958b1266348872efb85d2e5`; base: `53e069f534ebe4a5dd39f155a032a8507d81497f`; core PR211. - Verdict: APPROVED. No P0/P1 findings. Exact two-file diff inspected. Strict `plugin_dispatch`/`status` exception supplies no productive mandate; submit/cancel/retry and other orchestration remain denied. - `src/cli.ts:293-303` still checks worker guard and host provenance via `resultAllowed` before calling changed guard; plugin policies still run afterward. `dispatcher-runtime.ts:38-40` requires completed same-parent execution and non-stopped parent. Dispatcher plugin uses `store.list(context.sessionKey)` for status, excluding foreign results. - Independent rerun: 9 focused result/budget/real-PI-hook tests passed; 12 dispatcher-host tests passed; 1 dispatcher status bounds test passed (including foreign-session denial and no authority-token disclosure). Initial status-test invocation lacked generated plugins; normal locked materialization resolved it, then test passed. - Cross-vendor independence unavailable as handed off by parent; independent reviewer uses same backend/model family. Not claimed cross-family. - Review source was not modified. Generated plugin files are ignored build inputs. Independent source review approved; integration, image and consumer acceptance are separate pending stages.