Govern sharing of restricted data by observer verification - #340

Closed

Maximo-Guk wants to merge 14 commits into

mainfrom

restricted-data

Commits on Aug 28, 2026

Bugfix: Scrub persisted observer coverage on a failed live check.

Maximo-Guk
and
claude
committed
e2f5cba
Bugfix: Prune out-of-scope observer coverage at every open.

Maximo-Guk
and
claude
committed
37c5c4d
Bugfix: Keep a returning observer's registrations when re-verification fails.

Maximo-Guk
and
claude
committed
01e1228
Bugfix: Restart sessions when a collaborator's verification scope widens.

Maximo-Guk
and
claude
committed
0ae8f0c
Bugfix: Close the addGatekeeper publication window.

Maximo-Guk
and
claude
committed
790cf7c
Bugfix: Verify collaborators on the external-message path too.

Maximo-Guk
and
claude
committed
b1e825f
Docs: Document the session-restart model for observer verification.

Maximo-Guk
and
claude
committed
db563f7
typed-storage: Let a schema declare the storage key it lives under.
Maximo-Guk
committed
5cbabf2
Refactor: Rename prohibitAllSharing -> containsRestrictedData.

Maximo-Guk
and
claude
committed
9c45861
Restricted data part 1: Extend the API.

Maximo-Guk
and
claude
committed
0c68f54
Restricted data part 2: Govern restricted reads by observer verification.

Maximo-Guk
and
claude
committed
7c510e7
Restricted data part 3: Backend tests.

Maximo-Guk
and
claude
committed
7fd10f7
Restricted data part 4: Integration tests.

Maximo-Guk
and
claude
committed
0f78af2
Restricted data part 5: Document the model.

Maximo-Guk
and
claude
committed
f700992