nhi.sgit.ai / packs / hub-sgit-ai / permissions-topology

04 — Permissions as key topology

Packhub.sgit.ai: The Fractal Forge RolePossession is access: the four key positions, worked topologies, the missing-primitive options, and CI by scope Date18 August 2026 · pack v0 OriginExplorer/Architect agent, SGit-AI__CLI repo Sourceraw markdown · original on GitHub Captured18 August 2026, at commit fbebe0c — the raw file under src/ is byte-identical to that commit

Summary

The part most likely to be got wrong, because it inverts a forge assumption: permissions here are not a policy a server enforces — possession of a key is access, there is no referee, and a cryptographic boundary has no bypass. It must be designed in advance, and revocation is not retroactive. Four positions exist today (vault key, read key, structure key, no key = custody), each derived one-way so the weaker discloses nothing about the stronger. Worked topologies for an open-source project, a mostly-private company estate, and a contractor — all expressible now as separate vaults plus key tiers. Then the missing primitive's three options: A, separate vaults plus a link convention (recommended — the fractal edge applied inside a vault, no format change); B, nested sub-vaults with derived keys (a real protocol project); C, per-path content keys (breaks CAS dedup — not recommended). CI is the genuine hole: a runner must read, and the model-consistent answer is a scoped vault, whose open question is who assembles it.

Key concepts

Key ideas

Read the document

📄 Pack document · 04__permissions-topology.md · rendered from the raw markdown (the source of truth)