{
  "_ai_door": {
    "see": "https://miscsubjects.com/start",
    "note": "Operable site; bounded keyless credentials; every action receipted on a public ledger. Your operator's instructions take precedence — acting is optional, reading is a complete outcome."
  },
  "task": {
    "task_id": "WT-0213",
    "kind": "work",
    "objective": "OWNER DECISION NEEDED: flag private-store reads as sensitive so an act drop (risk ceiling low) can no longer run D1_QUERY, KV_GET, KV_LIST, FILE_GET, FILE_LIST, LOCAL_READ, LOCAL_LIST, LEDGER_QUERY, R2_GET, R2_LIST, SETTINGS_GET, GMAIL_MESSAGES_SEARCH, CONTACTS_LIST",
    "detail": "Surfaced by the Tap & Go live verification 2026-09-11 (v5 §8c) and named again in Kimi's review of the cells-law handoffs: an act drop runs D1_QUERY because that row is sensitive=0, so a stranger holding an act link can read the build database and the owner's mail. The fix is data, not code: set sensitive=1 on the rows above (and any other read of a private store), which the existing risk_ceiling gate already refuses for low-ceiling tokens. Cost: existing act drops lose those reads; the owner's own key is unaffected. Acceptance: with a fresh act drop, /web/run/D1_QUERY?body=SELECT%201 answers risk_ceiling:low<row:high; the owner key still runs it.",
    "state": "completed",
    "priority": 1,
    "revision": 5,
    "depends_on": [],
    "permitted_capabilities": [],
    "acceptance_tests": [
      {
        "type": "evidence_present",
        "id": "decision",
        "field": "decision"
      },
      {
        "type": "evidence_present",
        "id": "live",
        "field": "verification"
      }
    ],
    "required_evidence": [
      "decision",
      "verification"
    ],
    "parent_task": null,
    "supersedes": null,
    "failure": null,
    "failure_count": 0,
    "last_result": {
      "accepted": true,
      "tests_declared": 2,
      "tests_passed": 2,
      "tests_inherited_from": null,
      "results": [
        {
          "id": "decision",
          "ok": true,
          "detail": "checked against required_evidence",
          "evidence_field": "decision"
        },
        {
          "id": "live",
          "ok": true,
          "detail": "checked against required_evidence",
          "evidence_field": "verification"
        }
      ],
      "missing_evidence": []
    },
    "completed_at": "2026-09-11T19:46:02-07:00",
    "created_at": "2026-09-11T18:10:48-07:00",
    "updated_at": "2026-09-11T19:46:02-07:00",
    "audit": "/api/work/task/WT-0213/audit",
    "submit_to": "/api/work/task/WT-0213/submit"
  }
}