Skip to content

EffectivePermissionState

Experimental

The effective permission-state projection: the committed native permission snapshot (profile identity, reviewer authority) plus the live per-session runtime’s attachment evidence. The same object session/setPermissionProfile returns and the Session object carries as permissionState. Served values must be coherent: a read never combines an old profile with a newer runtime’s attachment claim (ADR 42197 D3).

  • axes — Experimental
  • profileId — Experimental
  • reviewerAttached — Experimental
  • reviewerAuthority — Experimental
Source

schema/msp/experimental/msp.schema.json#/types/EffectivePermissionState

{
"description": "The effective permission-state projection: the committed native permission snapshot\n(profile identity, reviewer authority) plus the live per-session runtime's\nattachment evidence. The same object `session/setPermissionProfile`\nreturns and the `Session` object carries as `permissionState`. Served\nvalues must be coherent: a read never combines an old profile with a newer\nruntime's attachment claim (ADR 42197 D3).",
"properties": {
"axes": {
"$ref": "#/$defs/PermissionAxes",
"description": "The committed profile's effective four axis values: the resolved filesystem, network, approval, and reviewer\nthe YOLO predicate reads. Omitted when unknown — an older host, the\nno-profile state, or the commit-receipt fallback arm that reports\nwithout a re-inspect — and a client MUST fall back to the served id\nthere, never infer equivalence it cannot see."
},
"profileId": {
"description": "The committed profile id; `null` when the committed source is a launch\noverride (`LaunchOverrides` pins `id: None`) — 's served-site\nrule; every catalog row and configured/default commit carries a non-null id.",
"type": [
"string",
"null"
]
},
"reviewerAttached": {
"description": "Whether an executable reviewer is currently installed for this loaded\nsession (live runtime evidence).",
"type": "boolean"
},
"reviewerAuthority": {
"$ref": "#/$defs/ReviewerAuthority",
"description": "The committed profile's reviewer authority."
}
},
"required": [
"profileId",
"reviewerAttached",
"reviewerAuthority"
],
"type": "object",
"x-msp-descriptor": "session/setPermissionProfile",
"x-msp-stability": "experimental"
}