IIP-069: Approvals mid-run, exactly bound
IIP-069 is recorded on the Hypervisor Daemon roadmap with status Active implementation in Horizon 0 — building the governed core: Approvals mid-run, exactly bound. When policy says ask, the guest pauses and the request lands in the Inbox. The approval binds the exact arguments, target versions, an expiry and a one-time nonce; it is signed with a passkey and rechecked just before dispatch. Standing permissions can be set once, so routine work needs no prompt. An agent can forward a request but never an approval..
What it is
When policy says ask, the guest pauses and the request lands in the Inbox. The approval binds the exact arguments, target versions, an expiry and a one-time nonce; it is signed with a passkey and rechecked just before dispatch. Standing permissions can be set once, so routine work needs no prompt. An agent can forward a request but never an approval.
Where it stands
Partly built. Passkey-authorized standing permissions and single-use drawdowns were shown in a bounded local profile; pausing mid-run and exact binding on the default path are in progress.
What has to be true next
Stale, mutated, replayed, expired or relayed approvals are rejected every time, within latency limits fixed in advance.
Status
Active implementation in Horizon 0 — building the governed core. Implementation is underway and has current code anchors, but the stated scope is not complete. Horizons order work by evidence, not by date.
Evidence
The paper, release, repository path or evidence bundle behind this status.