eden-wire enforces admin authority two different ways:
require_admin (auth.py) checks the literal admin principal — used by the groups, workers, and checkpoints routers.enforce_in_any_group(deps, request, ("admins",)) (_dependencies.py) checks transitive membership in the admins group — used by the tasks router (reassign).
These are semantically different authority models applied to different endpoints. A ground-up design picks one abstraction (group membership, since admin ≈ member-of-admins) and routes all gating through it.
See docs/design/2026-07-04-ground-up-review.md §2.7 / §4 (defect 3).
eden-wire enforces admin authority two different ways:
require_admin(auth.py) checks the literaladminprincipal — used by the groups, workers, and checkpoints routers.enforce_in_any_group(deps, request, ("admins",))(_dependencies.py) checks transitive membership in theadminsgroup — used by the tasks router (reassign).These are semantically different authority models applied to different endpoints. A ground-up design picks one abstraction (group membership, since
admin≈ member-of-admins) and routes all gating through it.See
docs/design/2026-07-04-ground-up-review.md§2.7 / §4 (defect 3).