oleg.m/waggle-os
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

moving
Some checks failed
Installer Smoke / installer-smoke (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Oleg Maslov
2026-09-02 10:10:29 +02:00
commit 0c3e2ead3b
3841 changed files with 970576 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
notes/risk-vocabulary-drift.md Normal file
View File

@@ -0,0 +1,10 @@
# One shared risk vocabulary; drifted enums silently inverted safety UX
Five backend modules each grew their own risk/approval/audit enums. Two real consequences: a
critical-sorts-below-low RBAC bug (string sort on drifted tiers), and the headline D4(ii) defect —
the server computed full trust metadata but the FE card type dropped it, so the riskiest approval
showed the least information. Fix: canonical `@waggle/shared/risk.ts` (widest-set enums +
`riskRank`), all consumers re-pointed, `critical→critical` behavior-preserving, and "Always allow"
gated by approvalClass so a critical op can never be permanently granted in one click. Lesson:
safety UX degrades through type drift, not through missing features — unify vocabulary before
polishing surfaces.