NEC-100: ADR 0007 and SAFE-D2 still credit Relay with role-based access control #162

Merged

nectenda-agent merged 2 commits from worktree-nec-100-adr-0007-and-safe-d2-still-credit-relay into main 2026-09-25 00:42:55 +01:00

Conversation 0 Commits 2 Files changed 5 +141 -13

nectenda-agent commented 2026-09-24 23:34:25 +01:00

Collaborator

Copy link

Task: NEC-100 — https://projectron.nerchure.com/tasks/100

SAFE-D2 (docs/v1/invariants.md) and ADR 0007 still said competitors whose servers read plaintext offer role-based access control. NEC-50 corrected the same claim elsewhere: no Relay release ships read-only, and their Reader role is merged but not released. Both now say a server that reads plaintext could make read-only a simple check, that Relay had not released one as of 24 September 2026, and point at competition-relay.md's Permissions section for sources. ADR 0007's Consequences now describe positioning.md's weakness-to-own as parity today, and drop 'parity is not the goal'. The E2EE argument (a server that cannot read plaintext cannot judge a write) is unchanged. The covering test, security-model-claims.test.ts, gains a comment saying it defends only the disclaimer, not the market fact. spec-delta was mutation-checked: it refuses the SAFE-D2 rewording without the test touch, and accepts it with. conformance.md is regenerated for the one-line shift. Acceptance greps: grep -n role-based docs/v1/invariants.md and grep -n 'role-based|parity is not the goal' docs/v1/adr/0007-no-read-only-membership.md both return nothing.

Spec: docs/changes/NEC-100-adr-0007-safe-d2-relay-rbac/spec.md

Changelog

NONE

Task: NEC-100 — https://projectron.nerchure.com/tasks/100 SAFE-D2 (docs/v1/invariants.md) and ADR 0007 still said competitors whose servers read plaintext offer role-based access control. NEC-50 corrected the same claim elsewhere: no Relay release ships read-only, and their Reader role is merged but not released. Both now say a server that reads plaintext could make read-only a simple check, that Relay had not released one as of 24 September 2026, and point at competition-relay.md's Permissions section for sources. ADR 0007's Consequences now describe positioning.md's weakness-to-own as parity today, and drop 'parity is not the goal'. The E2EE argument (a server that cannot read plaintext cannot judge a write) is unchanged. The covering test, security-model-claims.test.ts, gains a comment saying it defends only the disclaimer, not the market fact. spec-delta was mutation-checked: it refuses the SAFE-D2 rewording without the test touch, and accepts it with. conformance.md is regenerated for the one-line shift. Acceptance greps: grep -n role-based docs/v1/invariants.md and grep -n 'role-based\|parity is not the goal' docs/v1/adr/0007-no-read-only-membership.md both return nothing. Spec: `docs/changes/NEC-100-adr-0007-safe-d2-relay-rbac/spec.md` ## Changelog NONE

nectenda-agent added the

area:docs

label 2026-09-24 23:34:25 +01:00

nectenda-agent added 2 commits 2026-09-24 23:34:25 +01:00

Stop crediting competitors with access control in SAFE-D2 and ADR 0007 ... b054d21a5b

NEC-50 corrected positioning.md, competition-relay.md and sync-limitations.md,
which said competitors offer role-based access control; no Relay release ships
read-only. SAFE-D2 and ADR 0007 still said it. Both now say what a server that
reads plaintext could do, that Relay had not released it as of 24 September
2026, and point at competition-relay.md for the dated sources. The E2EE
argument itself is unchanged.

The covering test gains a note on what it does and does not defend for
SAFE-D2: the disclaimer, not the market fact.

Task: NEC-100
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JvnvD1dMmHHb4yYT1MVCQD

Commit the conformance line numbers, and say what Relay had not released ... 494f7a9eca

SAFE-D2 grew by a line, so every rule after it in invariants.md moved down
one; the gate regenerated conformance.md but it was not committed. The test
comment said competitors lacked "access control", but Relay ships private
folders; what they had not released is read-only roles.

Task: NEC-100
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JvnvD1dMmHHb4yYT1MVCQD

cruelacid force-pushed worktree-nec-100-adr-0007-and-safe-d2-still-credit-relay from 494f7a9eca to c2cbf0a0fd 2026-09-25 00:36:00 +01:00 Compare

nectenda-agent merged commit c2cbf0a0fd into main 2026-09-25 00:42:55 +01:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

area:docs

docs/

  

area:identity

packages/identity

  

area:ops

deploy/, CI, hosting

  

area:plugin

packages/plugin

  

area:server

packages/server

  

channel:community

Obsidian forum, Obsidian Discord, Reddit

  

channel:direct

Cold outreach to named firms

  

channel:owned

nectenda.com pages, the feedback board

  

channel:press

Hacker News, newsletters, outlets, YouTube creators

  

channel:social

Bluesky, Mastodon, X, YouTube accounts

  

e2ee-constrained

End-to-end encryption changes the shape of the answer

  

gate:at-ga

Held until Gates A-C close and terms/privacy leave DRAFT

  

gate:pre-ga

Safe to do before the launch gates close

  

marketing

Reach and positioning; work published off nectenda.com

  

parity

Relay feature-parity programme

  

relay:absent

4 - Not supported, not requested, not planned at Relay

  

relay:planned

2 - On Relay's roadmap (Active/Planned) or has an open PR

  

relay:requested

3 - Asked for by Relay users or under 'Considering'; not committed

  

relay:supported

1 - Relay ships this today

  

risk:additive

New message type, table or column; backward compatible

  

risk:contract

Changes something existing accounts or stored data depend on

  

risk:none

Client-only; the server is untouched

  

usability

How the product is understood and learned, not what it does

No labels

area:docs

area:identity

area:ops

area:plugin

area:server

channel:community

channel:direct

channel:owned

channel:press

channel:social

e2ee-constrained

gate:at-ga

gate:pre-ga

marketing

parity

relay:absent

relay:planned

relay:requested

relay:supported

risk:additive

risk:contract

risk:none

usability

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

Nectenda/nectenda!162

No description provided.