knowledgepixels / nanopub-query / 27540887844

61%

push

github

doc(spaces): add preset-role-materialization design with anti-hijack latest-wins

Server-side materialization of preset-bundled roles (presets issue #302,
"point 1"), handed off from the Nanodash side. Verified against current
nanopub-query internals (AuthorityResolver tiers, SpacesExtractor.TRIGGER_TYPES
single-source gate) and the Nanodash latest-wins-not-invalidates publish model.

Amendment: latest-wins is authorization-scoped — the MAX(dct:created) candidate
set in both the activation gate and the deactivation delete is restricted to
admin-authored assignments, matching Nanodash and the #113 anti-hijack rule
(admins(alias) ⊆ admins(canonical)). Unscoped latest-wins would let any key
suppress/delete a preset-derived role via a newer DeactivatedPresetAssignment.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

480 of 896 branches covered (53.57%)

Branch coverage included in aggregate %.

1420 of 2293 relevant lines covered (61.93%)

9.24 hits per line