I3435 — A Cockpit snapshot withholds every page that reads a capability refusing remote callers, not only the continuity page it names

✕BLOKOVÁNO wave 2 · p2 · implementation profile · parallel safe

Part of a-prompt-reaches-the-work-it-serves — A captured prompt is matched to its existing intent and recorded on the task that follows, joined to its outcome and evidence, shown on /ui and the Cockpit, read only on its own machine and never published.

Cíl

Replace the Cockpit subject's single-route list (snapshot.rs:111-114) with the same check I3433 gives the UI subject. The check takes the readings each Cockpit page declares in cockpit/pages.rs and withholds a page that reads an unlisted capability or one that declares I3434's checkout-private field. /cockpit/continuity stays withheld by that rule rather than by name.

Proč

The owner's 2026-10-19 Cognitive Fabric pack applies the whitelist to every public view, the Cockpit included (campaigns/prismatic-way-cognitive-fabric-prompt-pack/prompts/05_SURFACES.md, verification/ACCEPTANCE.md).

Aktuální stav

apps/majordomus-cli/src/web/report/snapshot.rs:111-114 withholds only /cockpit/continuity, a list of routes rather than of readings. The Cockpit pages are declared in apps/majordomus-cli/src/cockpit/pages.rs.

Cílový stav

Each Cockpit page is published or withheld by what it reads.

Rozsah

• apps/majordomus-cli/src/web/report/snapshot.rs
• apps/majordomus-cli/src/cockpit/pages.rs

Mimo rozsah

• The UI subject (I3433)
• Changing what the live Cockpit serves

Závislosti

• I3433✕BLOCKED A UI snapshot page renders only the readings its subject declares publishable, and a page that reads any other reading, or a capability that refuses remote callers, is withheld with a link to the live page

Kritéria přijetí

• /cockpit/continuity is still withheld, now by the rule
• A fixture Cockpit page reading a checkout-private capability is withheld
• Every other current Cockpit snapshot page renders byte-identically to before

Validace

• cargo test --manifest-path apps/majordomus-cli/Cargo.toml --lib web::report::snapshot
• cargo test --manifest-path apps/majordomus-cli/Cargo.toml --test cockpit

Požadované důkazy

• a_cockpit_snapshot_publishes_only_declared_readings

Důkazy

Nic nezaznamenáno. Za každým tokenem výše musí stát příkaz nebo artefakt, než lze tento úkol dokončit; vyprávění se odmítá.

Časová osa

zahájeno

—

ověřeno

—

dokončeno

—

Tato tři pole, důkazy výše a stav závislostí jsou vše, z čeho se stav skládá. Neexistuje žádné pole stavu, které by s nimi mohlo být v rozporu.

Canonical record: .ai/repo/project/issues/I3435.yaml. Read it back with majordomus plan show I3435.