plans: row b (235) refuses a host grant to a creative role, after row 213 lands (mos-1163, Webby N2 on 213 r4)

2026-10-21 04:40:22 -05:00
parent 38b83ea5c6
commit 01e1fe5128
1 changed files with 10 additions and 1 deletions
@@ -106,4 +106,13 @@ X5). At start, after the grant reconcile, the bus unlinks every `host.<id>` key
 `host_grants` record (r6 N1, G27). It adds no schema step. If it needs one, Sage re-briefs it first and
 assigns the next free step (#436b holds 3j to 3k, row 206 3k to 3l).

-Gate: as row a, with section 10's row b tests and mutants, G27, G28 and the upsert mutant included.
+Creative roles get no host grant (mos-1163, from Webby's N2 on row 213 r4). Since row 234, a role
+definition's credentials no longer gate host access, so the host grant writer itself refuses a grant whose
+agent is a `CREATIVE_DEFINITIONS` role (row 213), with a named reason and a test. The Case 2 hub runs
+creative agents on .54, and without this a creative role has a path to `host.run`. Duckworth's review checks
+it, and answers from the code whether a decision raised by another role can be spent by a creative one.
+`CREATIVE_DEFINITIONS` comes from row 213, so row 213 lands before row b. If that order can't hold, Sage
+tells Mos before row b lands.
+
+Gate: as row a, with section 10's row b tests and mutants, G27, G28 and the upsert mutant included, and
+the creative refusal test.