A verification failure inside the layers is decided here. Material that cannot be reduced goes on, and can find no hit.
A verification failure inside the layers isdecided here. Material that cannot bereduced goes on, and can find no hit.
The four hits — a trusted place, person or thing, or the subject's own
The four hits — a trusted place, person or thing, or the subject's own
relay hit
relay hit
an entry of scope relay whose member is the arrival relay → admits the whole event — strangers it names included never for encrypted material
an entry of scope relay whose member is the arrival relay→ admits the whole event — strangers it names includednever for encrypted material
npub hit
npub hit
an entry of scope npub whose member is the publisher → admits the whole event, wherever it arrived a mention never hits; for encrypted material only an interact entry, on the recovered author
an entry of scope npub whose member is the publisher→ admits the whole event, wherever it arriveda mention never hits; for encrypted material only an interact entry,on the recovered author
event hit
event hit
an entry of scope event whose member is this event's id → admits this event a coordinate member never hits; never for encrypted material
an entry of scope event whose member is this event's id→ admits this eventa coordinate member never hits; never for encrypted material
self hit
self hit
the publisher is the subject → admits the subject's own event — the gates still apply also the subject's own copy of a private message
the publisher is the subject→ admits the subject's own event — the gates still applyalso the subject's own copy of a private message
The deciding hit is the first in a fixed order: the self hit, then entries in canonical order, implied guardian entries first. The trace carries every qualifying hit, so when something reaches the feed that should not have, a guardian knows every grant it stood on.
The deciding hit is the first in a fixed order: the self hit, then entries in canonical order, implied guardian entries first. The trace carries every qualifying hit, so when something reaches the feed that should not have, a guardian knows every grant it stood on.
7 · The render walk — how deep a permitted event renders
7 · The render walk — how deep a permitted event renders
Below layer 0 no grant is sought: nested events are fetched lazily and deny-checked only. A wall stops its branch and records why; everything above it stays visible. Bounded, by default: depth 4 and 10 000 fetch attempts per evaluation; a cycle simply stops.
Below layer 0 no grant is sought: nested events are fetched lazily and deny-checked only. A wall stops its branch and records why; everything above it stays visible.Bounded, by default: depth 4 and 10 000 fetch attempts per evaluation; a cycle simply stops.
The kind 0 clause — strangers stay legible
The kind 0 clause — strangers stay legible
An arriving profile event (kind 0) that is not encrypted renders without any hit: only the deny gates and a global deny tied to weekdays or hours apply to it.
So when a trusted person references someone unknown, the subject can see who that is — and ask a guardian for a grant, or an extension through the person who made the reference. Input only: signing the subject's own kind 0 is gated like any other kind.
An arriving profile event (kind 0) that is not encrypted renders without any hit: only the deny gates and aglobal deny tied to weekdays or hours apply to it.So when a trusted person references someone unknown, the subject can see who that is — and ask aguardian for a grant, or an extension through the person who made the reference.Input only: signing the subject's own kind 0 is gated like any other kind.