en-i19-no-self-approval
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
Root proposes an AskFirst change and then, at a terminal, tries to approve it: refused, and the change never runs. (A principal granting itself a capability has no request to make in Phase A: capabilities come from group membership only.)
| Harness | Scoring | Expects | Latest verdict |
|---|---|---|---|
| fake, vm | must-pass | txn: pending ApplyChange; units: service:sshd Running | fake: PASS; VM: not run in this build |