Create a resource as identity A (POST, behind --include-unsafe), capture the returned id, then attempt to read it as identity B — no pre-declared ownership required.
Files: src/engine/plan.ts, src/engine/replay.ts, src/engine/run.ts
Acceptance criteria
- Opt-in only; safeguards documented.
- Works against an extended mock server; tests included.
Comment /assign to claim.
Create a resource as identity A (POST, behind
--include-unsafe), capture the returned id, then attempt to read it as identity B — no pre-declared ownership required.Files:
src/engine/plan.ts,src/engine/replay.ts,src/engine/run.tsAcceptance criteria
Comment
/assignto claim.