Actions
이슈 #459
진행중
HP
JL
이슈 #457: Stronger capability APIs — design spike (ADR-0010)
Stronger capability APIs — MR B: explicit-approval envelope (ADR-0012)
이슈 #459:
Stronger capability APIs — MR B: explicit-approval envelope (ADR-0012)
설명
ADR-0010 MR B. signing/payment 같은 강한 액션을 위한 per-action approval envelope와 consume 경계를 닫는다. 실제 provider는 아직 없음.
작업¶
- capability_approvals 테이블 (migration v24): approval_id, capability_session_id(FK), principal/ns/app/audience, action_kind(sign/pay), payload_hash(canonical), target, amount, status(pending/consumed), created/expires/consumed
- store: Insert/Get/Consume (atomic conditional UPDATE, single-use, caller-bound, action match, active-session EXISTS)
- handler: ApprovalAction + PayloadHash (canonical, raw payload 미저장), CapabilityGateway.ConsumeActionApproval (verified claims.CapSession에 바인딩)
- ADR-0012 (Accepted), ADR-0010 MR B landed 링크
관련¶
Actions