Accepted adr-012 · 2026-10-07

The Owner Puts a Round and Lands From the Shared Face: the Page Asks the Person's Authority for Their Authorize Decision by Passkey, the Intent Carries It Unspent, and `specdossier apply` Sends It With the Act; Attest and Open Stay the CLI's

Context

adr-006 lets the owner prepare acts on the shared face and apply them in their copy with `specdossier apply`; only the agreement was built (sow-the-owner-agrees-from-the-shared-face). The agreement needs no Authorize decision: it is written in the person's copy and reaches the service as nothing. Putting a round and landing do: each request carries the person's own signed Authorize decision for the action revise, the document and a digest — the one the round shows, or none for the first, when putting; the agreed one when landing — and the service spends it once (code/crates/specdossierd/src/gate.rs). `specdossier apply` runs from an openbyname link with no terminal, so it cannot ask the person for a decision then.

The round's page already asks the guest's authority for an Authorize decision by passkey (signatio's web client, sow-a-guest-proves-presence-with-her-passkey), for the round and the bytes read. The page knows both digests a round or a landing is decided on.

Attest needs a minisign signature of the agreed bytes, made on the signer's machine out of band. Open names the governed document by its path in the project, and adr-006 says an intent never names a path of the project, while listing open among the acts the face prepares.

The principal chose, 2026-10-07: round and land from the face; the decision travels in the intent; an amendment of adr-006 before the SOW.

Decision

ROUND AND LAND ARE PREPARED ON THE FACE. The person who opened a dossier prepares, on its round's page, putting the next round of a governed document and landing the agreed dossier. Each intent records, beside what adr-006 names (act, dossier, round, the digest it was prepared against), the person's Authorize decision for that act: action revise, the dossier's document, and the digest the act is decided on — the round's current one for a round, the agreed one for a landing.

THE DECISION IS THE PERSON'S, ASKED BY THE PAGE, CARRIED UNSPENT. The page asks the person's authority for it with their passkey through the authority's web client, as it asks a guest's for a remark. The service checks it when the intent is prepared — the person's, for that action, document and digest — and does not spend it; it keeps it with the intent, single-use and expiring with it, and releases it only with the intent, to that person. `specdossier apply` sends it with the act exactly as the verb sends a `--decision` file; the service spends it then, as today. A decision whose digest is no longer the round's is refused at apply, as the intent is.

ATTEST AND OPEN STAY THE CLI'S. Attest carries a signature made out of band; open names a path of the project. The face shows the commands; neither is prepared as an intent.

WHAT THIS AMENDS: adr-006's decision — the acts the face prepares are agree, round and land; an intent may carry its person's unspent Authorize decision; open and attest are the CLI's alone, which removes adr-006's contradiction about open. adr-006's constraints stand.

WHAT THIS DOES NOT DECIDE: hand (it prints a round for an agent, nothing to prepare); a face for open with closing terms; what an orchestrated instance carries.

AMENDED 2026-10-08 BY adr-017: open may be prepared from the face as an intent naming the SOW by id and digest, never by a path, applied in the person's copy by `specdossier open`; attest stays the CLI's.

Constraints

Alternatives considered