S9 acceptance finding 3 / P1-B: the project settings modal exposed host override settings (model and key group, masked) to plain project members.
Ruling per the acceptance plan: the modal entry stays (granted duty managers need the RDM tabs); the host override settings group on the project tab renders only for the project owner or a system admin; RDM tabs keep their own fail-closed gating (data plane already permission-enforced, zero leakage verified in S9).
Evidence: vitest 34 files / 293 tests pass; tsc clean for the modified file.
S9 acceptance finding 3 / P1-B: the project settings modal exposed host override settings (model and key group, masked) to plain project members.
Ruling per the acceptance plan: the modal entry stays (granted duty managers need the RDM tabs); the host override settings group on the project tab renders only for the project owner or a system admin; RDM tabs keep their own fail-closed gating (data plane already permission-enforced, zero leakage verified in S9).
Evidence: vitest 34 files / 293 tests pass; tsc clean for the modified file.
Why: S9 acceptance finding 3 — the project settings modal exposed the
host override settings (including the model/key group, masked) to plain
project members; the duties data plane was already permission-enforced,
but the host settings surface had no gate.
Evidence: vitest 34 files / 293 tests pass with the change; tsc reports
no errors in the modified file. Ruling per the acceptance plan P1-B:
the modal entry stays (granted duty managers need the RDM tabs), while
the host override settings group renders only for the project owner or
a system admin; RDM tabs keep their own fail-closed gating.
Impact: ProjectSettingsModal project tab renders an explanatory empty
state for non-privileged viewers; members/duties/matrix tabs unchanged.
Refs: S9 acceptance report P1-B
weichen
merged commit 3bbb918795 into main2026-10-16 05:10:17 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
S9 acceptance finding 3 / P1-B: the project settings modal exposed host override settings (model and key group, masked) to plain project members.
Ruling per the acceptance plan: the modal entry stays (granted duty managers need the RDM tabs); the host override settings group on the project tab renders only for the project owner or a system admin; RDM tabs keep their own fail-closed gating (data plane already permission-enforced, zero leakage verified in S9).
Evidence: vitest 34 files / 293 tests pass; tsc clean for the modified file.