[LAZARUS][INVITES] Signed invite tokens and guest/human onboarding protocol #270

Open
opened 2026-04-06 15:33:16 +00:00 by Timmy · 0 comments
Owner

Parent: #267

Depends on: #268

Milestone: Lazarus Pit v2.0

What

Define and implement how fleet agents, guest bots, and human users join a resurrection cell safely.

Scope

  • invite token schema (cell_id, role, project, expiry, signature)
  • verification path for valid/expired/revoked invites
  • guest-bot join rules
  • human observer/director join rules
  • minimal permission model so guests never gain broader fleet access by accident

Acceptance Criteria

  • invite token spec exists
  • signature/verification path exists
  • expired/revoked invite behavior is defined
  • guest bots join with least privilege
  • humans can observe/direct without inheriting raw agent credentials
## Parent: #267 ## Depends on: #268 ## Milestone: Lazarus Pit v2.0 ## What Define and implement how fleet agents, guest bots, and human users join a resurrection cell safely. ## Scope - invite token schema (`cell_id`, role, project, expiry, signature) - verification path for valid/expired/revoked invites - guest-bot join rules - human observer/director join rules - minimal permission model so guests never gain broader fleet access by accident ## Acceptance Criteria - [ ] invite token spec exists - [ ] signature/verification path exists - [ ] expired/revoked invite behavior is defined - [ ] guest bots join with least privilege - [ ] humans can observe/direct without inheriting raw agent credentials
Timmy added this to the Lazarus Pit v2.0 — Cells, Invites, and Teaming milestone 2026-04-06 15:33:16 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Timmy_Foundation/timmy-config#270