aaronrene / knowtation public
docs feat/companion-app #7 / 15
aaronrene · 11 days ago · Jun 6, 2026 · Diff

docs: server-side OAuth gate (D-SS.1–4) + infra corrections (AWS t3.xlarge decommissioned, knowtation-mcp-gateway confirmed as gateway host)

sha256:fa98c9fd00f44574dbeebc87ad0c6f2c6b7a2a7ab8cfad2f68f5d29b43dc3965 sha
sha256:3c71452a68bfee676b1e54695a6d54acb254b3271bb2b31f727090f9618d3f27 parent
+31 ~4 symbols
sha256:1f932be1fec5a215986d5c351075faa9e0e10c2966ae0d2dbec77462ef262b5b snapshot
+31
symbols added
~4
symbols modified
0
dead code introduced
Semantic Changes 35 symbols
~ docs/COMPANION-APP-OAUTH-SERVERSIDE-GATE.md .md 31 symbols added
+ Companion App — Server-Side OAuth Gate (client registration + scopes) section Companion App — Server-Side OAuth Gate (client registration + scopes) L1–347
+ 1 — Scope / identity parity for the native client section 1. Decision D-SS.1 — Scope / identity parity for the native client L64–115
+ Adversarial argument section Adversarial argument L83–93
+ table section table L85–92
+ Recommendation — Option (b) (product + eng call → owner ratification requested, §9) section Recommendation — Option (b) (product + eng call → owner ratification requested, §9) L93–115
+ Verified state section Verified state L69–83
+ 2 — Hosted availability of the authorization/token endpoints section 2. Decision D-SS.2 — Hosted availability of the authorization/token endpoints L115–186
+ Adversarial argument section Adversarial argument L143–161
+ Recommendation — DECIDED: reuse `knowtation-mcp-gateway` (no new server) section Recommendation — DECIDED: reuse `knowtation-mcp-gateway` (no new server) L161–186
+ Verified live server inventory (owner-confirmed 2026-06-06) section Verified live server inventory (owner-confirmed 2026-06-06) L129–143
+ table section table L134–138
+ Verified state section Verified state L120–129
+ 3 — RFC 9207 iss emission on the redirect section 3. Decision D-SS.3 — RFC 9207 iss emission on the redirect L186–215
+ Recommendation — CONFIRM (emit `iss`) section Recommendation — CONFIRM (emit `iss`) L197–215
+ Verified state section Verified state L190–197
+ 4 — Loopback redirect registration with a variable ephemeral port variable section 4. Decision D-SS.4 — Loopback redirect registration with a variable ephemeral port L215–265
+ Adversarial argument section Adversarial argument L232–248
+ Recommendation — CONFIRM, with a hard implementation obligation section Recommendation — CONFIRM, with a hard implementation obligation L248–265
+ Verified state section Verified state L221–232
+ Threat model → control (server side) section 5. Threat model → control (server side) L265–282
+ table section table L269–279
+ Precise server-side change list (for the FOLLOW-UP implementation phase) section 6. Precise server-side change list (for the FOLLOW-UP implementation phase) L282–306
+ table section table L287–295
+ 7-tier test obligations (per change C1–C6) section 7. 7-tier test obligations (per change C1–C6) L306–322
+ table section table L310–319
+ Constraints honored section 8. Constraints honored L322–335
+ Approval table section 9. Approval table L335–347
+ table section table L337–343
+ Simple summary section Simple summary L19–35
+ Technical summary section Technical summary L35–64
+ table section table L43–56
~ docs/PAPERCLIP-AWS-SETUP-AND-IMAC-TRANSITION.md .md 3 symbols modified
~ code[bash]@L78
~ code[bash]@L88
~ Paperclip — AWS setup, root-cause notes, and iMac transition plan
~ vault/projects/knowtation/research/2026-05-07-architecture-final-decision.md .md 1 symbol modified
~ Architecture final decision — 2026-05-07
Older feat(companion-phase-4): runtime manager decision core — pure li… sha256:3c71452a68bfee676b1e54695a6d54acb254b3271bb2b31f727090f9618d3f27 All commits Newer gate: ratify D-SS.1–D-SS.4 (owner approved 2026-06-06) sha256:de62fc4a070e88cfbb2f87c264a9c8805ecfc3b6887171d984b8eb53be3a830d

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:fa98c9fd00f44574dbeebc87ad0c6f2c6b7a2a7ab8cfad2f68f5d29b43dc3965 --body "your comment"