Feedback: recording access changes (draft)

[jediwright]

This thread records responses to a draft on recording access changes: changes in who can see or act on data when the data itself does not move, such as a permissioned space made public, a member added to a private group, or a grant issued or revoked.

The draft: drafts/access-change.md (as posted: 991afda; Q5's premise narrowed at cef92b4, see the draft's Design status). It is a draft for feedback, not the specification. The live lexicons and CONFORMANCE.md are the only normative text. It's only had internal review, and Q1 to Q4 have had no review at all.

Open until Monday 26 October 2026, end of day US Eastern. If you need more time, say so here and the window can be extended; it will not be shortened.

Questions (set out in full in §4 of the draft):

1. Q1. Is the emitter's own agent grant, taken alone, the right test of who counts as its agent?
2. Q2. Should one value, access-change-observed, carry two meanings, told apart by actorRelation, or should a gated change that diverged get its own value?
3. Q3. Should a gated change that produced something other than what the gate authorized be allowed a public commitment?
4. Q4. Is the last sentence of live CONFORMANCE.md line 66 accurate and clear?
5. Q5 (optional). Does a grantee giving a whole group access to a document read as an access change, and to what?

How to respond. Reply here, by question number. Answer any subset; one line is plenty, and "this is fine as written" is useful. Comments on the appendices are welcome too; please say which section.

Other channels. A post in the Lexicon Community category of the AT Protocol forum points here and replies there are just as welcome; both are read and kept together. If the draft comes up on the Lexicon Community call on Thursday 1 October, 1 PM ET, I'll post a summary in this thread afterward. If the summary gets something wrong, correct it here.

What happens to responses. Every response is logged with its date, channel, your public handle, and the response verbatim or linked. Nothing is decided during the window, and questions are not settled one by one in the thread. After the window closes, I'll weigh the responses before deciding what to adopt. Responses may be quoted with attribution to your public handle; if you would rather not be quoted, say so.