Permission and principal data move into lichen-types, and the permission lists and the sandbox compiler move into lichen-sandbox-policy. Shared request identity, the site record and build data move into three more modules of lichen-types, while connection Origin, admission and staged-build ownership stay in the site crate. Consumers use each crate directly, and the core-size ceiling is lowered to the new count. Policy and wire behaviour are unchanged; no grants, goldens or snapshots change.
MINIMAL-CORE, unit 3 (3 and 3b). Plan: https://tangled.org/notplants-bot.bsky.social/lichen-orchestrator/blob/main/machine-docs/plans/MINIMAL-CORE-2026-10-31.md
This is a reading copy: only this PR's product changes, applied in order on its base. Nothing here is to be merged.
Source PRs on lichen.page.review (product), in order, with their original descriptions #
-
#3636
s/1009-mc-permission-policy-product— extract permission types and policyMove permission and principal data into lichen-types, and the permission lists and sandbox compiler into lichen-sandbox-policy. Consumers use each crate directly; policy and wire behavior remain unchanged.
-
#3640
s/1010-mc-shared-data-v2-product— extract shared request and build dataMove shared request identity, site record and build data into three lichen-types modules. Keep connection Origin, admission and staged-build ownership in site.
Commits #
- b669fe41a MINIMAL-CORE unit 3: extract permission types and policy
- c69436ac9 MINIMAL-CORE unit 3b: share request, site and build data (folded into unit 3)
Count and shas #
count-product-code-lines f70f9aa0d3f6..c69436ac9d12: NET +0 · counted +432 -432 · moved out of the counted set +0 · comment-only deletions flagged 10 · macros flagged 0 · tests-folder code flagged 0
Base f70f9aa0d3f6e8838fc7acc617f63d5a67e45a08 (tip of s/1008-mc-ssrf-core-tests). Head c69436ac9d12eaed4405732ada38cea6a8ff4f1b. 66 files changed.
Check #
Every changed file is a file one of the product PRs changed, and each is identical at the head to the same file at the last product branch s/1010-mc-shared-data-v2-product.
No file here was changed by any tests PR of this unit.