GR_002 · Lifecycle-Bound Authority Registry

Type
GR
Failure domain
Policy Enforcement
Mechanism
Extension Authority Lifecycle
Status
proposed
View source on GitHub

Failure Pattern Mitigated

  • FP_002 Extension Authority Persistence

Invariant Enforced

  • INV_005 — stale authority must be detectable and revocable.

Guardrail Design

Authority entries are derived views of active components, not independent mutable state.

Implementation Sketch

  • key authority records by component/extension ID
  • derive active authority set from currently active extensions
  • revoke on deactivate/uninstall synchronously
  • assert zero stale authority records in lifecycle tests

Tradeoffs

  • stronger coupling between lifecycle and authority registry paths
  • uninstall/deactivate path must be failure-aware
  • FP_002
  • FP_003