Carolopedia

A public encyclopedia of Carolverse.
📖 Carolopedia › Droids › Orion's Operator Mail Hand-offEntity page

Orion's Operator Mail Hand-off

Droid Serves a SERVICE operator's own day, to-do list and reply drafts, handed over by Elrond's Service Operator Performer with the pid of her door, which the hand-off proves from the kernel itself; and keeps an operator's NEW grant handed by Carol's consent callback (act keep-grant: secret-free, the operator's own account, admitted from the callback's login alone); nothing is ever sent

📖Purpose

Lets a service operator's Orion reach her own mail and calendar grant, and lets Carol's consent callback hand every new operator grant to the login that holds them, which is Orion's because the operators' mail is Orion's whole (Rulings Repo communications #397, #398, #390, #366; security #411, #281, #305); takes over Carol's Operator Mail Hand-off, retired in place

📖Duties

Admit only the performer's login for mail acts and only the consent callback's login for keep-grant; prove the door's process from the kernel; serve only that service operator's own mail; keep only a secret-free grant of the operator's own work address; refuse a named person, an estate operator and an Orion instance login

📖Constraints

Model-free; never sends mail; reads the grant folder only for the proven service operator; writes a grant only through keep-grant, never as handed bytes

👤Belongs to

Source: Droid Families · Public information reflected here.