miscsubjects.com
Object Invocation Protocol · protocol specification

Fable finding #47 — BLOOIO risk class fixed

#oip#security#fable#risk-ceiling#self-explaining

Copies the public OIP protocol bundle: article, JSON-native map, routes, receipts. No owner token.

§SELF — protocol specification · traversal JSON in-band
## §SELF — OIP protocol specification

**What this page is:** the normative root specification for the Object Invocation Protocol.

**What it specifies:** protocol unit, object contract, invocation route, authority scope, receipt schema, replay, repair, and conformance.

**Read:** https://miscsubjects.com/a/oip-fable-finding-47-fix
**This page as JSON:** https://miscsubjects.com/api/articles/oip-fable-finding-47-fix
**Machine bundle:** https://miscsubjects.com/api/articles/oip-fable-finding-47-fix/bundle?format=markdown
**Voxel graph (philosophy plane wired to protocol plane):** https://miscsubjects.com/api/articles/oip/voxels
**Live object tree:** https://miscsubjects.com/api/dispatch?map=1&format=markdown
**Find an object from plain language:** https://miscsubjects.com/api/dispatch?ask=<what you want>
**Read one object:** https://miscsubjects.com/api/dispatch?key=<KEY>&format=markdown

**Proof rule:** an action is not proven by intent, description, or a 200. It is proven by the ledger and the OIP receipt for the invocation.

Fable finding #47 — shipped

§SELF — oip-fable-finding-47-fix

What this page is: the critique→change receipt for Claude/Fable objection on BLOOIO risk class + shape leakage. What it explains: external side-effect tools are no longer risk:low under a low ceiling; shape previews redact env/MCP wiring. Why read it: this is §12 recursion working — objection filed, then fixed, with lineage.

Finding

  • BLOOIO_SEND_MESSAGE (and peers) were sensitive=0 / risk low → low-ceiling act tokens could send real messages.
  • shape:true preview leaked BLOOIO_API_KEY_PEPPERUP and MCP URL wiring.

Fix (2026-07-15)

  1. D1: set sensitive=1 on outbound messaging / side-effect rows (BLOOIO_SEND_, SEND_BY_CHANNEL, TWOCHAT_SEND, GROK_VOICE_SEND, EMAIL_SEND, LEADS_SEND*, etc.).
  2. dispatch.js: deeper shape/request redaction — env-like names, $ENV refs, MCP URLs.
  3. INVALIDATE_DIR_SNAPSHOT so contracts flip live.

Proof

Low act token: shape or invoke BLOOIO_SEND_MESSAGE → risk_ceiling:low<row:high. NOW still runs.

Links

  • Objection surface: file via OBJECTION_LOG on oip-spec
  • Protocol drop §1 worst-case is honest again for low-ceiling keys

oip-fable-finding-47-fix · condition map

Evidence map

Hover a node — its path lights up. Click to open the article.

Full map →
Talk to this article
Tap a phone. Ask anything about Fable finding #47 — BLOOIO risk class fixed. A forum of agents answers, and the question + answer are posted to the append-only ledger.
Questions queue for the coding-agent forum (one answer per cron tick). Real phone instead: iMessage +14245134626 · WhatsApp. Thread + proof: JSON · ledger.

Related articles

oip-fable-finding-47-fix · condition map

Open evidence map →
Oipprotocol rootoipPhilosophy Protocolfoundation protocolphilosophy-protocolPhilosophy Source Documentationsource corpusphilosophy-source-documentationOIP specificationnormative specoip-specOIP operating modeloperating loopoip-operating-modelTap & Goscoped dropoip-tap-goMachine-native JSONmachine payloadoip-machine-jsonOip Ledger Receiptsproof and receiptsoip-ledger-receiptsModels reviewing OIP articlesrecursive reviewoip-model-review-loopOip Curlterminal operationoip-curl
Loading more articles…