Name:
[FIX] viin_brain,viin_web_editor: Brain core launch-hardening (T-1/T-2/T-3)
State:
Killed
PR State:
merged
PR Author:
David Tran
PR Author Email:
PR:
#39
Committer:
David Tran
Committer Email:
davidtran.hp@gmail.com
Commit:
60a0fbcc72c5cac6e953f792480909d90d2f969b
Description:
[FIX] viin_brain,viin_web_editor: Brain core launch-hardening (T-1/T-2/T-3)
- T-2 privacy: daily notes can never be shared via link (ValidationError in
_check_page_shareable); share comment state no longer hardcoded (honors
comment_auto_approve).
- T-3 ACL: complete the 40-cell matrix in tests — non-owner (incl brain/vault
admin) cannot read/write another user's daily note; commenter cannot write
own daily body. No rule change (rule_page_daily_global already enforces).
- T-1 concurrency: deterministic version token (isoformat ms) + re-enable
first-save optimistic-concurrency check in page_editor (realtime untouched).
- Tests: viin_web_editor powerbox-registry QUnit, trigger-regex edge cases,
block_parser round-trip tour + wrapper.
- Docs: CHANGELOGs, brain/security.md ACL matrix, decisions/wi-005 (privacy-first).
Branch:
17.0
Instance ID:
0
Age:
Up-time:
Not finished