NAP-CLASS-1: Strict baseline posture (sub-track) - #17
Draft
dskvr wants to merge 2 commits into
Draft
Conversation
dskvr
added a commit
that referenced
this pull request
Apr 21, 2026
dskvr
marked this pull request as draft
April 22, 2026 09:01
dskvr
changed the title
Rebased onto current master; spec only. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Open NAP proposal branches need reader-visible changelogs that track semantic spec changes without recording formatting-only migrations. Constraint: Changelog entries are one bullet per semantic commit-change. Rejected: Include schema-table or formatting-only commits | they do not change the spec contract or boundary. Confidence: high Scope-risk: narrow Directive: Keep future changelog entries semantic; omit changelog-only and formatting-only commits. Tested: git diff --check Not-tested: Rendered Markdown
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Status: Draft
Parent: NAP-CLASS
Class number: 1
Summary
NAP-CLASS-1 is the strict baseline posture for napplets that do not declare any class-contributing NAP capabilities. Shells emit a restrictive Content Security Policy with
connect-src 'none', show no consent prompt, and sendclass.assignedwithclass: 1.CSP Posture
Shells emitting the NAP-CLASS-1 posture MUST include
connect-src 'none'in the runtime CSP served with the napplet's HTML. Other directives in the baseline CSP (script-src,default-src,img-src, etc.) are shell-policy concerns and are NOT specified by NAP-CLASS-1 — only theconnect-srcvalue is the class's defining characteristic.Scope
NAP-CLASS-$N($N > 1) MUST document their own triggers.connect-src 'none', skip consent prompt, send terminalclass.assignedwithclass: 1.fetch/WebSocket/EventSourceany host. Indirect network still available via shell-mediated NAPs (e.g., NAP-RESOURCE).Non-Goals
connect-src— not in scope.Implementations
(none yet)Changelog
71ad6a1- Introduced NAP-CLASS-1 as the strict baseline posture sub-track.