cubelinux-2

T

hermes e77c650e9c feat(cubesys): Task 6b — permission grants (PDF flags 5-19)

Add a delegated-grant auth layer:
- cubesys/src/grants.rs: Grant/Owner/Perm model, GRANT_BUCKET at
  Czyx::new(0,1,0,1), grant/revoke/grant_allows, std-only JSON codec.
- Stored via put_record with a doc_type='grant-table' header so it
  survives checkpoint/restore (raw put_raw was dropped on dump_store).
- commands.rs: GRANT/REVOKE opcodes + admit_mutate() enforcement hook
  (owner -> grant -> deny). GRANT/REVOKE require HELLO identity under
  --require-identity.
- Enforce owner-match contract preserved (legacy/tests stay green).
- 11 new grant tests; full ./check quick = 115 pass, clippy -D clean.

2026-08-11 15:01:35 -04:00

.hermes/plans

feat(cubesys): Task 6b — permission grants (PDF flags 5-19)

2026-08-11 15:01:35 -04:00

cube-bench

feat(cubesys): Task 4 reader/writer sharding (Mutex -> RwLock)

2026-08-11 12:20:08 -04:00

cubecode

fix(cubecode): share one data stack across CALL_LINK frames

2026-08-10 19:59:17 -04:00

cubecoords

feat(system): bind cubefs+cubecode+cubecrypt into one running system (cubesys)