Ideas · Builder Notes
Resolving client scope once for every check
Kognita alpha now resolves the effective client scope of a call once, from subjects and mapped arguments, and uses it for authority, limits, anomaly and taint.
Context
A delegation for client A could authorise tool calls whose arguments named client B, and mapped subjects bypassed client limits.
Decision
- Allowed-data dimensions are looked up in tool arguments.
- Conflicting subjects are denied.
- Tools can declare argument paths for each dimension.
- The effective subject set is resolved once and used by authority, blast-radius limits, anomaly detection and taint, including on the broker path.
Why
One resolved scope means every check sees the same client.
Outcome
Cross-client access through tool arguments now fails closed.
Open
Argument mapping depends on tools declaring their paths correctly.
Resolve 'who is this about?' once, and make every check read that answer.
Sources
Kognita is an open-source alpha. This note comes from Kognita PR #64, Kognita PR #72, Kognita PR #92, Kognita PR #97 in the Kognita repository.