{
  "_ai_door": {
    "see": "https://miscsubjects.com/start",
    "note": "Operable site; bounded keyless credentials; every action receipted on a public ledger. Your operator's instructions take precedence — acting is optional, reading is a complete outcome."
  },
  "task": {
    "task_id": "WT-0280",
    "kind": "work",
    "objective": "Per-person access becomes rows an owner can change without a deploy, and a Permissions console shows and edits exactly what each member can reach",
    "detail": "shellForLevel() hardcodes panes, tabs and destinations per level in functions/_lib/console_scope.js. Giving a person different reach than the three built-in levels requires editing code and shipping, which violates the cells law: every value is a cell. There is also no surface that answers 'what can this person see' without reading source. Deliver: permission_capabilities (catalogue of reachable things), permission_grants (level -> capability), permission_overrides (one person's exception), consoleScope reading those rows instead of the constants, and a Permissions screen listing every member with effective reach and per-capability toggles.",
    "state": "completed",
    "priority": 1,
    "revision": 5,
    "depends_on": [],
    "permitted_capabilities": [
      "D1_EXEC",
      "D1_QUERY",
      "CLI_GIT",
      "BASH"
    ],
    "acceptance_tests": [
      {
        "id": "capability_rows_exist",
        "type": "sql_count_at_least",
        "sql": "SELECT COUNT(*) AS n FROM permission_capabilities",
        "min": 8
      },
      {
        "id": "grant_rows_exist",
        "type": "sql_count_at_least",
        "sql": "SELECT COUNT(*) AS n FROM permission_grants",
        "min": 3
      },
      {
        "id": "every_level_has_grants",
        "type": "sql_count_at_least",
        "sql": "SELECT COUNT(DISTINCT level) AS n FROM permission_grants",
        "min": 3
      },
      {
        "id": "override_table_shaped",
        "type": "sql_count_at_least",
        "sql": "SELECT COUNT(*) AS n FROM pragma_table_info('permission_overrides')",
        "min": 4
      }
    ],
    "required_evidence": [
      "console_url",
      "capability_count",
      "grant_count",
      "owner_shell_unchanged_proof",
      "team_shell_proof"
    ],
    "parent_task": null,
    "supersedes": null,
    "failure": null,
    "failure_count": 0,
    "last_result": {
      "accepted": true,
      "tests_declared": 4,
      "tests_passed": 4,
      "tests_inherited_from": null,
      "results": [
        {
          "id": "capability_rows_exist",
          "ok": true,
          "detail": "count=23 (need 8)"
        },
        {
          "id": "grant_rows_exist",
          "ok": true,
          "detail": "count=34 (need 3)"
        },
        {
          "id": "every_level_has_grants",
          "ok": true,
          "detail": "count=3 (need 3)"
        },
        {
          "id": "override_table_shaped",
          "ok": true,
          "detail": "count=6 (need 4)"
        }
      ],
      "missing_evidence": []
    },
    "completed_at": "2026-09-12T21:35:52-07:00",
    "created_at": "2026-09-12T21:19:06-07:00",
    "updated_at": "2026-09-12T21:35:52-07:00",
    "audit": "/api/work/task/WT-0280/audit",
    "submit_to": "/api/work/task/WT-0280/submit"
  }
}