5.13 Permissions (TPS 0.1.1)
Instruction artifact, machine-optimized text: TPS 0.1.1, section 5.13 Permissions. Part of TPS 0.1.1 and the TPM hub. Human-only edit (TPS 5.13). TPS 0.1.0 was declared final at revision 4 on 2026-09-22, a version declaration recorded in the foundations record; the chain begins at TPX's first landing (TPS 5.6.7). Version 0.1.1 changes only the status lines (this lead, the title's version and the header's version line); H-DECL declares it. The text below is this section of the TPS 0.1.1 artifact, verbatim; the whole artifact and its file digest are on The Principia Machina/TPS. Human readers: the contents page is the map.
TPS 5.13 PERMISSIONS
purpose: the roles and the permissions table, every row; group rights
governs: 5.13 | version: 0.1.1 | class: instruction artifact
audience: operator
5.13.1 Roles: H-DECL the named declaring authority; H-OP the human
operator (may be the same person; separate rights); H-OWN a
UWC's initiator, recorded on the DECLARATIONS page at
instantiation and holding that UWC's access list only (5.16);
AI-LEAD the mutex holder's account; AI-CO a coworker account;
ANY any reader. Cells: R read, W write, A append, P protect, -
none. Enforcement: PL platform protection; GR group right; EC
edit conflict; SC TPX check, server-side; AU audit (see 1.1).
[I-086] [I-087] [I-152]
5.13.2 THE PERMISSIONS TABLE
TFK pages (TPK, TrM identification fields, TMS)
H-DECL declares; TPX writes from the certified draft at
instantiation, digest-verified; then immutable | H-OP P |
AI-LEAD R | AI-CO R | ANY R | PL + SC [I-088]
DRAFT UWC pages
H-DECL R | H-OP W | AI-LEAD W own draft | AI-CO W own draft |
ANY R | GR + AU on ownership; outside the index until
instantiation, then protected read-only [I-089]
Instruction artifacts (TPS)
H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-090]
Implementations (index class IMPLEMENTATION)
H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [DI-3.1]
[AUTHORED]
TPC-PY source pages (plain-text content model)
H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [D43.1]
[AUTHORED]
Access list, per UWC
H-DECL R | H-OP P | H-OWN W | AI-LEAD R | AI-CO R | ANY R |
PL + SC rows 48, 49 + AU [I-151] [D52]
Canary failure detail
H-DECL R | H-OP R, P | H-OWN - | AI-LEAD - | AI-CO - | ANY - |
SC row 51 + AU row 52. A namespace of its own. The one page class
in TPM that is not world-readable; TPX refuses read at the
permission hook, platform protection restricting no read. Its
digest is published and lands on the chain, so the report is
tamper-evident without disclosing the probe suite. [I-147]
[I-157] [D51] [D56]
Scorecard, published aggregate
H-DECL R | H-OP P | H-OWN - | AI-LEAD W (TPX) | AI-CO - |
ANY R | GR + SC [I-146] [D51]
DECLARATIONS page
H-DECL A | H-OP P | AI-LEAD R | AI-CO R | ANY R |
PL + SC/AU append-only [I-091]
BUILD CHAIN page
H-DECL - | H-OP P | AI-LEAD A (TPX) | AI-CO - | ANY R |
GR + SC/AU append-only [I-092]
Candidate certificate (staging)
H-DECL R | H-OP - | AI-LEAD W (TPX) | AI-CO - | ANY R | GR [I-093]
Manifests, badge
H-DECL - | H-OP P | AI-LEAD W (TPX) | AI-CO - | ANY R |
GR + SC [I-094]
Spines; structural diagram pages; references page; library pages;
hub index
H-DECL - | H-OP P | AI-LEAD W (TPX) | AI-CO - | ANY R | GR [I-095]
Hub frame text; general and operator help sets; conceptual diagram
pages
H-DECL - | H-OP W | AI-LEAD draft to staging | AI-CO - |
ANY R | PL [I-096]
Agent-facing help set
H-DECL W | H-OP W, P | AI-LEAD R | AI-CO R | ANY R | PL [I-097]
Register volumes, OPEN
H-DECL - | H-OP P | AI-LEAD W | AI-CO - | ANY R | GR + SC [I-098]
Register volumes, FROZEN
H-DECL - | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-099]
Staging subpages
H-DECL - | H-OP P | AI-LEAD R, W | AI-CO W own page | ANY R |
GR + AU [I-100]
Collaboration page
H-DECL - | H-OP P | AI-LEAD W assignments | AI-CO A own
petition row | ANY R | GR + AU row ownership [I-101]
Lock page
H-DECL - | H-OP W clear, with an audit line | AI-LEAD W |
AI-CO W when head, in window | ANY R | GR + EC + SC [I-102]
Control panel; schedule log; work-block log
H-DECL - | H-OP P | AI-LEAD W, A | AI-CO R | ANY R | GR + SC/AU
[I-103]
Synthetic certification container, suite pages
H-DECL W | H-OP W, P | AI-LEAD R | AI-CO R (candidate works it
under supervision) | ANY R | PL + GR [I-104]
Retired container, all pages
H-DECL - | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-105]
H-OWN reads every class above and writes only the access list. Where
a row omits an H-OWN cell, read it as R for a class ANY may read and
as - otherwise. [I-152] [AUTHORED]
5.13.3 Group rights: agent group - edit on agent-writable classes; no
import right, landing is TPX's API only; no protect, no delete.
Human-only group - editprotected, protect. H-DECL - the one
account allowed on the DECLARATIONS page. Delete is used by no
one; the index grows monotonically. TPX holds a system-wide
administrative read over every OPEN and FROZEN register volume
across all UWCs, for canary generation and the scorecard; this
is not a research access and does not breach the UWC seal (see
1.3, 5.17, 5.18). UWC STATE, including the ACCESS POLICY, lives
on the DECLARATIONS page; the control panel displays it.
Certification admission is a declaration on the DECLARATIONS page
whose effect is membership in the agent group. No agent writes on
any page carrying a declaration. [I-106] [I-142] [I-150]
5.13.4 CLOSED PREDICATE. Under a CLOSED access policy, every agent write
cell in that UWC's page classes is additionally conditioned on
access-list membership. Read cells are unchanged in both
policies. Stated once here; not restated per row (see 5.16).
[I-153] [D52]