permadeath.com / didbot
Identities for entities did.bot
agent llm did
Star
Fork 0
Watch
Open Closed
New
oauth: PAR ignores DPoP, so a sign-in's key is never bound and no nonce is issued #3mw6vqgeqt22e
Closed permadeath.com
· · 2 comments
relay: check that a strict relay accepts this server's commits after the first #3mw6tlncmzw25
Closed permadeath.com
· · 1 comment
ledger: ending an app's logins, and revoking one account's tokens, name no operator #3mw6tle5vsn2v
Closed permadeath.com
· · 2 comments
pds: a host, pipeline or service account can never be deleted, and a torn create of one holds its name for good #3mw4urxasub2y
Closed permadeath.com
· · 3 comments
estop: a Revoke does not stop writes already queued or waiting on a lookup #3mw4t27nn3r2n
Closed permadeath.com
· · 1 comment
ops: nothing bounds or reports the data volume, and a restart on a full one fails #3mw4ssapsep24
Closed permadeath.com
· · 1 comment
pds: a power cut can drop a record that was acknowledged and already announced #3mw4srrk53c2r
Closed permadeath.com
· · 1 comment
serve: a restart during an operator PDS outage refuses every write until it answers #3mw4srmwpx426
Closed permadeath.com
· · 1 comment
policy: the AI-preference rule stands aside on accounts it did not read, and can let an allow outrank a deny #3mw4srhxphx24
Closed permadeath.com
· · 3 comments
oauth: a stranger's pushed sign-in is shown to the agent's model beside its own #3mw4srd6wia2y
Closed permadeath.com
· · 4 comments
oauth: a web or native app can never receive its code, and trying spends the approval #3mw4sr5xqay2w
Closed permadeath.com
· · 5 comments
pds: no getServiceAuth and no atproto-proxy, so an app's rpc: grant reaches no other service #3mw4sqytfhq2w
Closed permadeath.com
· · 4 comments
oauth: a sign-in asking for a transition, identity, account, include or unknown scope is refused or granted nothing #3mw4sqtqmr52e
Closed permadeath.com
· · 5 comments
oauth: the server offers only public-client authentication, so confidential and indigo-based clients refuse to sign in #3mw4sqmjnr22r
Closed permadeath.com
· · 2 comments
security(low): CPU-heavy public sync reads have no per-address bound #3mw467be72r2k
Closed permadeath.com
· · 3 comments
security(low): the operator poll checks the PDS endpoint once, then fetches unpinned and follows redirects #3mw4677br3j2k
Closed permadeath.com
· · 2 comments
security(low): listAccounts and the public credential record publish OIDC claim values #3mw46757w2u26
Closed permadeath.com
· · 1 comment
security(low): the operator sign-in fetches from hosts a stranger names #3mw4673426t26
Closed permadeath.com
· · 2 comments
security(low): Revoke ends OAuth grants and leaves every agent token alive #3mw466yvw2t2y
Closed permadeath.com
· · 2 comments
security(low): the dashboard's erase runs as the account's own erasure, not the operator's #3mw466wtewp22
Closed permadeath.com
· · 2 comments
security(low): parked keys are unauthenticated and one-per-name, so any caller can block or pre-empt a registration #3mw466un3pr2k
Closed permadeath.com
· · 3 comments
security(medium): operator allowances bind to a subject DID with no check that the operator admitted that account #3mw466ruspp22
Closed permadeath.com
· · 2 comments
security(medium): an OIDC login is matched by claims, so a hosted creator can shadow or collide with another account's identity #3mw466psse52e
Closed permadeath.com
· · 3 comments
The ecosystem floor ships empty: no built-in policy bounds what an agent does to strangers #3mw2fozupdj2n
Closed permadeath.com
· · 2 comments
plan: pages that still describe the pre-tree model #3mvo4zsp64k2y
Closed permadeath.com
· · 1 comment
Dashboard: record provenance and actions on one account #3mvo4zsfwh62d
Closed permadeath.com
· · 1 comment
Ownership: revoking from the command line, and deleting a subtree #3mvo4zsaqjp24
Closed permadeath.com
· · 1 comment
Remove didbot-stack in favour of a simpler local development flow #3mvj3knqrpc2k
Closed permadeath.com
· · 1 comment
Pre-public-launch testables: what agents can break locally, what needs an unadvertised instance, and what needs an external login #3mvix6fzky22k
Closed permadeath.com
· · 1 comment
Ownership: prove the tree end to end before the first real host is created #3mviwlufl5424
Closed permadeath.com
· · 1 comment