feat(console): real consent flow with field narrowing, time limits, and grant binding - #57

Draft

tnunamak wants to merge 72 commits into

mainfrom

consent/real-console-flow-0902

Commits on Sep 2, 2026

feat(ri): re-skin the hosted UI stylesheet to the console's Ink Carbon tokens
tnunamak
committed
afa7e4c
fix(ri): make the hosted consent screen tell the truth about who said what
tnunamak
committed
e2fb6a6
feat(ri): let the owner say no, and tell the client they did
tnunamak
committed
996c353
feat(ri): bind the approval to the decision the owner actually reviewed
tnunamak
committed
cd86f2a
fix(ri): stop promising a per-source revoke the product cannot perform
tnunamak
committed
b7eb874
test(ri): prove CIMD handling against ChatGPT's real metadata document
tnunamak
committed
7d440cd
feat(ri): resolve per-stream field and date narrowing from the declaration
tnunamak
committed
fbb9082
feat(ri): make grant expiry an owner choice with a bounded default
tnunamak
committed
f62f908
feat(ri): make a long source list findable, and say how much is selected
tnunamak
committed
7291a9a
feat(ri): carry per-stream scope through the picker form
tnunamak
committed
dfcce10
feat(ri): give browser-reachable failures a page, and the empty picker a door
tnunamak
committed
2771b63
feat(ri): carry per-stream field and date narrowing into the issued grant
tnunamak
committed
5947484
fix(ri): tell the owner what happened to their data when they say no
tnunamak
committed
c42cc1a
feat(ri): preview the anticipated consent design behind an owner-only route
tnunamak
committed
01763db
fix(ri): make the consent screen work on a phone, and style the button it forgot
tnunamak
committed
60e83e4
feat(ri): apply the owner's chosen expiry to the issued grant
tnunamak
committed
58c4b31
fix(ri): stop saying "Your server describes" twice in a row
tnunamak
committed
2aa330d
test(ri): pin retention's authorship class, not the heading it happened to have
tnunamak
committed
4136d32
feat(ri): render the trust status a client actually earned
tnunamak
committed
d70251f
fix(ri): stop squeezing consent facts into a 20ch gutter on a phone
tnunamak
committed
83f57df
feat(ri): let a client earn a verified badge by proving it controls its domain
tnunamak
committed
92f224d
feat(ri): offer the field, date, and expiry controls on the picker
tnunamak
committed
030eea3
feat(ri): proxy and cache approved client logos instead of hotlinking
tnunamak
committed
bc25fb2
fix(ri): humanize the time field against the fields the fleet actually declares
tnunamak
committed
e99a656
redesign(ri): rebuild the consent mock on the console's own design system
tnunamak
committed
8f132a4
fix(ri): stop the decision rail from saying "Access ends" twice
tnunamak
committed
b3b0f7f
feat(console): rebuild the consent design preview as a real console page
tnunamak
committed
0d7adab

Commits on Sep 3, 2026

Commits on Sep 9, 2026

fix(consent): type the picker schema so the reference typecheck passes
tnunamak
committed
700fdce

Commits on Sep 10, 2026