From b1e30bdb0b82344fb3a1ee9de4d6e69a27356bec Mon Sep 17 00:00:00 2001 From: Logan Johnson Date: Wed, 9 Sep 2026 13:02:55 -0400 Subject: [PATCH] docs(mobile): describe fresh authorization reader boundary Signed-off-by: Logan Johnson --- mobile/lib/shared/mentions/agent_publication.dart | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/mobile/lib/shared/mentions/agent_publication.dart b/mobile/lib/shared/mentions/agent_publication.dart index 1aedd98c64..a7fb1e2473 100644 --- a/mobile/lib/shared/mentions/agent_publication.dart +++ b/mobile/lib/shared/mentions/agent_publication.dart @@ -9,6 +9,11 @@ typedef AgentAuthorizationReader = bool Function() isCurrent, ); +/// Session-bound fresh authorization reader for exact recipient keys and one +/// destination. Re-reads verified ownership, policy and relay-signed membership; +/// cached directory suggestions are never publication authority. Query and +/// scope-change failures propagate to the caller, which must check currentness +/// before applying membership or publishing. This is not an atomic relay write. final agentAuthorizationReaderProvider = Provider(( ref, ) {