Repository navigation
T91 — Admit a widened store rule without restarting bep serve #2618
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| Round-three conditions closed | M | unknown ground | strongest | an agent | 220 (120 code, 100 tests) |
A store rule that adds an upstream is admitted without restarting bep serve.
Covers:
- BEP-032
Layers:
- admit:
- crates/bep/src/main.rs: a changed
[secret-store-rules]re-signs the root with the new names under the same key and subject, and rebuilds theAdmissionset (T91 — Admit a widened store rule without restarting bep serve #2618) - crates/bep/src/proxy.rs:
Admissiontakes a source that it asks at each CONNECT cargo nextest run -p bep a_widened_store_rule_is_admitted_without_a_restart
- crates/bep/src/main.rs: a changed
Waits on:
- T83 — Give bep serve the client's store rules so a store member is admitted #2599
- SP1 — Do Claude Code and an MCP client send a sealed handle unmodified? #2257
Plan block
### T91 — Admit a widened store rule without restarting bep serve
slice: S12
kind: task
covers: BEP-032
size: M
est: 120 code, 100 tests
executor: agent
difficulty: unknown ground
model: strongest
diagnostics: none: a widened rule admits its upstream as any other admitted upstream, and the log line names the re-sign.
observability: one info log line when the root re-signs or the admitted set changes
layers:
- admit:
- crates/bep/src/main.rs: a changed `[secret-store-rules]` re-signs the root with the new names under the same key and subject, and rebuilds the `Admission` set (#2618)
- crates/bep/src/proxy.rs: `Admission` takes a source that it asks at each CONNECT
test: cargo nextest run -p bep a_widened_store_rule_is_admitted_without_a_restart
produces: none
consumes: none
proof: A store rule that adds an upstream is admitted without restarting bep serve.
depends on:
- blocked by #2599
- blocked by #2257
Generated by Claude Code
Reacted by minimal-foundry
Activity
fix(bep): re-read the merged store rules at each redemption (T83)
[-]BEP-032: admit a widened store rule without restarting bep serve (T83 residual)[/-][+]T91 — Admit a widened store rule without restarting bep serve[/+]minimal-foundry commentedon Oct 27, 2026
Done. #2663 merged.
branch
agent/2618-admit-a-widened-store-rule-without-restarting-be· epic #1501 · PR #266394900bf32fe557e2Updated 2026-10-27T05:42:50.242Z.
test(e2e): restart the proxy after min secret set in the store cas 8000 e
test(e2e): restart the proxy after min secret set in the store case
feat(bep): give bep serve the client's store rules so a store member …
test(e2e): prove Keychain secrets by reference end to end (gominimal#…