docs(acl): threat model and conventions say app commands are ACL-gated

Browse Source

Task 2 already closed the risk (build.rs declares a Tauri AppManifest and
gates every app command per window); this task brings the docs in line so
the threat model of record no longer claims app commands are ungated or
that any local window can call any app command.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

shadowdao

2026-09-22 22:38:32 -07:00

co-authored by Claude Opus 5.5

parent 1401369ffa

commit bc4980e014

6 changed files with 29 additions and 10 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

app/src-tauri/gen/schemas/capabilities.json

+1 -1

File diff suppressed because one or more lines are too long