Task 14 rulings T14-1..3 (CRM labels and the SecurityService label endpoint)
CP05 Task 21 rulings T21-1..6 (recording access in voipservice; impact count 0)
Decision 4 on every recording read — participants, their chain, VIEW_CALL_LOGS, a linked lead's readers, in every org (KamoCollab CP05 Task 21)
RecordingController now runs tenancy (404), then the PHI capability (403), then CallRecordingAccess through access/RecordingAccessService (403 RECORDING_NOT_PER...
The external field view of a lead, ?fieldAudience=EXTERNAL (KamoCollab CP07 Task 9)
LeadFieldMask.applyExternal keeps exactly spec §5.18's fields, reduces the assignee to name and title, and nulls every other LeadDTO field through a fail-closed...
CP03 ruling T16-1 — the ORG charter save checks references once, in its writer
The ORG charter endpoints — GET /api/security/org/charter for any org session (items, counts, editable with CONFIGURE_SYSTEM) and PUT with CONFIGURE_SYSTEM, a full replace by id in OrgCharterWriter's one transaction, announced to the org's SI members (KamoCollab CP03 T16)
CallRecordingAccess and LeadCommsReadRule — decision 4's one rule for every recording door (god, participant, VIEW_CALL_LOGS, VIEW_VOICEMAIL for a voicemail, the management chain under decision 3a, the lead Communications gate), its facts loader, and the lead read rule moved to shared-lib (KamoCollab CP05 Task 12)
CP06 Task 3 rulings T3-1..3 (golden fixture shape, sources, capture base)
Golden files of today's briefs, captured before any personality change (KamoCollab CP06 Task 3)
Four charter views in the shape SecurityService serves (a full member, a voice-only SI member, a job-title persona, and a member view carrying CP03's unconfigur...
The org graph in KBService and every note read through the one widened predicate — shared notes reach their audience read-only; create and update refuse a shared scope (USE_RELEASE) and the reserved categories (RESERVED_CATEGORY) (KamoCollab CP05 Task 15)
- orggraph/OrgGraphBeanConfig + OrgGraphEventListener: the loader, the 60 s cache, and a core subscription to security.orggraph.changed.* that evicts the or...
VISIBLE as one id IN (… UNION ALL …), so every visible note read is index scans bounded by a key, not a scan of every note (KamoCollab CP05 Task 15)
Yugabyte, with bitmap scans off, answers the three ORed branches across different columns of notes with a sequential scan (EXPLAIN in production, the pre-CP05 t...
A new email, phone or address row keeps its field while you type in it
A row without a server id was keyed by its object, and every keystroke replaced that object, so the row got a new React key and its field was remounted on each ...
A new email, phone or address row keeps its field while you type in it
A row without a server id was keyed by its object, and every keystroke replaced that object, so the row got a new React key and its field was remounted on each ...
CP05 Task 11 rulings (release authority edges, ReleaseAudience canonical form)
SourceClearance and ReleaseAuthority — the structural bases (self or participant, existing access, the management chain with decision 3a's setter) and release authority (participation, the Confidential setter, the releaser's span), with their records (KamoCollab CP05 Task 11)
SP97 Task 9 rulings (scenario 8, the workstation) and the SP10/SP11 rulings for its fixes
CP03 Task 15 rulings T15-1, T15-2 (org archetype lookup, reference checks)
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.