This commit is contained in:
@@ -14,6 +14,11 @@ process requires Execute; layout-only changes require Configure. Launch intents
|
||||
refer to a user shell or an approved harness profile and working directory, not
|
||||
arbitrary executable arguments or secret values.
|
||||
|
||||
Detaching and reattaching an existing pane are layout-only Configure operations.
|
||||
Detached pane definitions remain outside the layout tree so reattachment does
|
||||
not imply a new launch. Terminating either an attached or detached session
|
||||
remains an Execute operation. See decision 0010.
|
||||
|
||||
This reducer is not an authorization bypass. The future IPC layer authenticates
|
||||
the caller and supplies its granted capability; the reducer rechecks it before
|
||||
mutation. Durable audit events record request and object identities, never
|
||||
|
||||
Reference in New Issue
Block a user