The Principia Machina/TPS/5.13 Permissions
Instruction artifact: TPS 0.1.0, page 5.13 Permissions. Part of TPS 0.1.0 and the TPM hub. Human-only edit (TPS 5.13). Version 0.1.0, proposed; declaration pending. Governing section: this page, TPS 5.13. The text below is this page's unit of the TPS 0.1.0 artifact, verbatim; the whole artifact and its file digest are on The Principia Machina/TPS 0.1.0.
TPS 5.13 PERMISSIONS
purpose: the roles and the permissions table, every row; group rights
governs: 5.13 | version: 0.1.0 (proposed) | class: instruction artifact
audience: operator
5.13.1 Roles: H-DECL the named declaring authority; H-OP the human
operator (may be the same person; separate rights); AI-LEAD the
mutex holder's account; AI-CO a coworker account; ANY any reader.
Cells: R read, W write, A append, P protect, - none. Enforcement:
PL platform protection; GR group right; EC edit conflict; SC TPX
check, server-side; AU audit (see 1.1). [I-086] [I-087]
5.13.2 THE PERMISSIONS TABLE
TFK pages (TPK, TrM identification fields, TMS)
H-DECL declares; TPX writes from the certified draft at
instantiation, digest-verified; then immutable | H-OP P |
AI-LEAD R | AI-CO R | ANY R | PL + SC [I-088]
DRAFT CONTAINER pages
H-DECL R | H-OP W | AI-LEAD W own draft | AI-CO W own draft |
ANY R | GR + AU on ownership; outside the index until
instantiation, then protected read-only [I-089]
Instruction artifacts (TPS)
H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-090]
Implementations (index class IMPLEMENTATION)
H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [DI-3.1]
[AUTHORED]
DECLARATIONS page
H-DECL A | H-OP P | AI-LEAD R | AI-CO R | ANY R |
PL + SC/AU append-only [I-091]
BUILD CHAIN page
H-DECL - | H-OP P | AI-LEAD A (TPX) | AI-CO - | ANY R |
GR + SC/AU append-only [I-092]
Candidate certificate (staging)
H-DECL R | H-OP - | AI-LEAD W (TPX) | AI-CO - | ANY R | GR [I-093]
Manifests, badge
H-DECL - | H-OP P | AI-LEAD W (TPX) | AI-CO - | ANY R |
GR + SC [I-094]
Spines; structural diagram pages; references page; library pages;
hub index
H-DECL - | H-OP P | AI-LEAD W (TPX) | AI-CO - | ANY R | GR [I-095]
Hub frame text; general and operator help sets; conceptual diagram
pages
H-DECL - | H-OP W | AI-LEAD draft to staging | AI-CO - |
ANY R | PL [I-096]
Agent-facing help set
H-DECL W | H-OP W, P | AI-LEAD R | AI-CO R | ANY R | PL [I-097]
Register volumes, OPEN
H-DECL - | H-OP P | AI-LEAD W | AI-CO - | ANY R | GR + SC [I-098]
Register volumes, FROZEN
H-DECL - | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-099]
Staging subpages
H-DECL - | H-OP P | AI-LEAD R, W | AI-CO W own page | ANY R |
GR + AU [I-100]
Collaboration page
H-DECL - | H-OP P | AI-LEAD W assignments | AI-CO A own
petition row | ANY R | GR + AU row ownership [I-101]
Lock page
H-DECL - | H-OP W clear, with an audit line | AI-LEAD W |
AI-CO W when head, in window | ANY R | GR + EC + SC [I-102]
Control panel; schedule log; work-block log
H-DECL - | H-OP P | AI-LEAD W, A | AI-CO R | ANY R | GR + SC/AU
[I-103]
Synthetic certification container, suite pages
H-DECL W | H-OP W, P | AI-LEAD R | AI-CO R (candidate works it
under supervision) | ANY R | PL + GR [I-104]
Retired container, all pages
H-DECL - | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-105]
5.13.3 Group rights: agent group - edit on agent-writable classes; no
import right, landing is TPX's API only; no protect, no delete.
Human-only group - editprotected, protect. H-DECL - the one
account allowed on the DECLARATIONS page. Delete is used by no
one; the index grows monotonically. Container STATE lives on the
DECLARATIONS page; the control panel displays it. Certification
admission is a declaration on the DECLARATIONS page whose effect
is membership in the agent group. No agent writes on any page
carrying a declaration. [I-106]