fix: align Worker operation grants and known-target observation

Compose the published T-803 candidate 51f0c7e019 with T-766 without target adoption. Preserve operation-use versus directional control, notify-only replies, live revocation, and T-766 receipt/provenance boundaries.
This commit is contained in:
2026-10-30 01:10:16 +09:00
parent c215c72873
commit d077302b92
22 changed files with 3044 additions and 533 deletions
+3
View File
@@ -450,6 +450,9 @@ pub struct CreateWorkerRequest {
pub workdir_attachment_requests: Vec<WorkingDirectoryAttachmentRequest>,
#[serde(default, skip_serializing_if = "Vec::is_empty")]
pub workdir_attachments: Vec<WorkingDirectoryAttachmentClaim>,
/// Enables the optional Runtime-local peer observation provider, not operation
/// authority. Scoped Backend observation follows the Worker Feature and live
/// operation/control checks, including when this saved flag is false.
#[serde(default, skip_serializing_if = "std::ops::Not::not")]
pub worker_observation_enabled: bool,
#[serde(default, skip_serializing_if = "Vec::is_empty")]