Spaces:
Running
Running
Commit History
-
feat(sector): the two rules a gated district must satisfy before it exists
**authenticated is now its own rung.** A seller's laptop can be paired and online while Amazon has expired the session or is asking for MFA. Collapsing those produces the worst failure this system can have: a district that looks healthy and quietly serves yesterday's numbers. reachable no longer implies authenticated, an expired session demotes the capability rather than being remembered as fine, and the reason says the owner must sign in again because no stored password can do it for them. **Rings, and evidence.** core/sector.py classifies material on the way in. restricted — customer names, addresses, payment detail, raw tokens — can never become a coordinate at all, enforced in preset() rather than requested in a doc. A district can say "47 orders support this" while the world never holds those 47 customers. sanitize() strips PII and credentials by field name at any depth and reports what it dropped, because silent redaction and no redaction look identical from outside. An insight…d909c25 -
feat(world): a place shows what it is broadcasting, above itself
Media a frequency carries now hangs over its structure on a mast — a real playing <video> drawn frame by frame into the scene, not a thumbnail of one. Images the same. It is the actual broadcast, in the sky, where a broadcast belongs. Muted by default, because a browser will not autoplay otherwise and six screens shouting at once is not a world. V toggles sound, and only the screen you are nearest is audible — you hear what you are standing in front of, and the compass names it. A gallery never competes for the audio; it has no track to unmute. Clamped in screen space as well as world space. Without that, flying up to a billboard scales it until it is the entire viewport and paints over the world it belongs to; it is a screen on a mast, not a takeover. Parcel media comes from the parcel record rather than its signals, because those carry names and never addresses — the same rule that keeps bytes out of the mesh. Private parcels are skipped entirely, so nothing of theirs is ever in t…b176504
