docs+test(closeout): final-review reservations — stale ACL prose, worker test gaps, config sample fix

2026-08-17 05:23:23 -04:00
parent f5a58d884b
commit b621d692d0
18 changed files with 167 additions and 46 deletions
@@ -23,9 +23,12 @@ public interface IDashboardSessionAcl
    /// session identified by <paramref name="sessionId"/>.
    /// </summary>
    /// <param name="principal">
-    /// The dashboard caller. <see langword="null"/>, unauthenticated, or claim-less
-    /// principals (including the anonymous-localhost path) are treated as Viewers
-    /// holding an empty tag grant.
+    /// The dashboard caller. <see langword="null"/> is denied outright — there is no
+    /// caller to grant tags to, so it never reaches the untagged-session branch and is
+    /// refused even under <c>UntaggedSessionVisibility=AllViewers</c>. An
+    /// unauthenticated or claim-less principal (the anonymous-localhost path included)
+    /// is a Viewer holding an empty tag grant, which denies every tagged session but
+    /// still follows that branch.
    /// </param>
    /// <param name="sessionId">Session id the caller wants to observe.</param>
    /// <returns><see langword="true"/> when the caller may observe the session; otherwise <see langword="false"/>.</returns>