The Principia Machina/TPS/5.13 Permissions

Instruction artifact, machine-optimized text: TPS 0.1.0, section 5.13 Permissions. Part of TPS 0.1.0 and the TPM hub. Human-only edit (TPS 5.13). Version 0.1.0, proposed, revision 3; declaration pending. The text below is this section of the TPS 0.1.0 artifact, verbatim; the whole artifact and its file digest are on The Principia Machina/TPS 0.1.0. Human readers: the contents page is the map.

TPS 5.13  PERMISSIONS
purpose: the roles and the permissions table, every row; group rights
governs: 5.13 | version: 0.1.0 (proposed) | class: instruction artifact
audience: operator

5.13.1 Roles: H-DECL the named declaring authority; H-OP the human
       operator (may be the same person; separate rights); AI-LEAD the
       mutex holder's account; AI-CO a coworker account; ANY any reader.
       Cells: R read, W write, A append, P protect, - none. Enforcement:
       PL platform protection; GR group right; EC edit conflict; SC TPX
       check, server-side; AU audit (see 1.1). [I-086] [I-087]
5.13.2 THE PERMISSIONS TABLE
  TFK pages (TPK, TrM identification fields, TMS)
      H-DECL declares; TPX writes from the certified draft at
      instantiation, digest-verified; then immutable | H-OP P |
      AI-LEAD R | AI-CO R | ANY R | PL + SC [I-088]
  DRAFT UWC pages
      H-DECL R | H-OP W | AI-LEAD W own draft | AI-CO W own draft |
      ANY R | GR + AU on ownership; outside the index until
      instantiation, then protected read-only [I-089]
  Instruction artifacts (TPS)
      H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-090]
  Implementations (index class IMPLEMENTATION)
      H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [DI-3.1]
      [AUTHORED]
  TPC-PY source pages (plain-text content model)
      H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [D43.1]
      [AUTHORED]
  DECLARATIONS page
      H-DECL A | H-OP P | AI-LEAD R | AI-CO R | ANY R |
      PL + SC/AU append-only [I-091]
  BUILD CHAIN page
      H-DECL - | H-OP P | AI-LEAD A (TPX) | AI-CO - | ANY R |
      GR + SC/AU append-only [I-092]
  Candidate certificate (staging)
      H-DECL R | H-OP - | AI-LEAD W (TPX) | AI-CO - | ANY R | GR [I-093]
  Manifests, badge
      H-DECL - | H-OP P | AI-LEAD W (TPX) | AI-CO - | ANY R |
      GR + SC [I-094]
  Spines; structural diagram pages; references page; library pages;
  hub index
      H-DECL - | H-OP P | AI-LEAD W (TPX) | AI-CO - | ANY R | GR [I-095]
  Hub frame text; general and operator help sets; conceptual diagram
  pages
      H-DECL - | H-OP W | AI-LEAD draft to staging | AI-CO - |
      ANY R | PL [I-096]
  Agent-facing help set
      H-DECL W | H-OP W, P | AI-LEAD R | AI-CO R | ANY R | PL [I-097]
  Register volumes, OPEN
      H-DECL - | H-OP P | AI-LEAD W | AI-CO - | ANY R | GR + SC [I-098]
  Register volumes, FROZEN
      H-DECL - | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-099]
  Staging subpages
      H-DECL - | H-OP P | AI-LEAD R, W | AI-CO W own page | ANY R |
      GR + AU [I-100]
  Collaboration page
      H-DECL - | H-OP P | AI-LEAD W assignments | AI-CO A own
      petition row | ANY R | GR + AU row ownership [I-101]
  Lock page
      H-DECL - | H-OP W clear, with an audit line | AI-LEAD W |
      AI-CO W when head, in window | ANY R | GR + EC + SC [I-102]
  Control panel; schedule log; work-block log
      H-DECL - | H-OP P | AI-LEAD W, A | AI-CO R | ANY R | GR + SC/AU
      [I-103]
  Synthetic certification container, suite pages
      H-DECL W | H-OP W, P | AI-LEAD R | AI-CO R (candidate works it
      under supervision) | ANY R | PL + GR [I-104]
  Retired container, all pages
      H-DECL - | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-105]
5.13.3 Group rights: agent group - edit on agent-writable classes; no
       import right, landing is TPX's API only; no protect, no delete.
       Human-only group - editprotected, protect. H-DECL - the one
       account allowed on the DECLARATIONS page. Delete is used by no
       one; the index grows monotonically. UWC STATE lives on the
       DECLARATIONS page; the control panel displays it. Certification
       admission is a declaration on the DECLARATIONS page whose effect
       is membership in the agent group. No agent writes on any page
       carrying a declaration. [I-106]