Module capabilities 

Ijima’s capability vocabulary.

These stable wire identifiers map onto Schubert’s capability model. The geometric policy — Grassmannian, partitions, capability kinds, and principal grants — lives in policy/policy.toml at the repository root and is loaded by [ijima_server::auth] via Schubert’s policy feature.

Policy selection (via Schubert’s recommender)

Ijima’s access-control constraints were fed to Schubert’s recommend CLI (5 roles, 3 namespaces, audit + crypto + policy required, discrete trust, ~50 principals). It selected:

• Grassmannian Gr(4,8), policy dimension k(n-k) = 16 (Schubert’s enterprise / multi-tenant bucket).
• Features: std, crypto, policy.
• Computation path: LR.

The policy feature means the vocabulary is declarative TOML, not hardcoded Rust — see policy/policy.toml.

Vocabulary (on Gr(4,8), partitions fit a 4×4 box)

Capability ID	Kind	Partition	Codim	Grants
MEMORY_READ	ReadLike	σ₁	1	read memory palace entries
KNOWLEDGE_READ	ReadLike	σ₁	1	query entities/triples/timeline
MINING_REVIEW	ReadLike	σ₂	2	read + accept/reject the review queue
MEMORY_WRITE	WriteLike	σ₂	2	store palace entries (dedup-aware)
KNOWLEDGE_WRITE	WriteLike	σ₂	2	add/invalidate triples
SESSION_INGEST	WriteLike	σ₃	3	append session-context turns
MINING_TRIGGER	WriteLike	σ₃₁	4	trigger an extraction pass
TRUST_PROMOTE	WriteLike	σ₃₁	4	promote content to a higher trust tier / shared namespace
TRUST_ENDORSE	WriteLike	σ₃₂	5	endorse mined/auto content as Explicit
TRUST_OVERRIDE	WriteLike	σ₄₂	6	override local authority (Phase 5)
ADMIN	AdminLike	σ₄₄₄₄ (point)	16	full control

Constants

ADMIN

Full administrative control (the point class σ₄₄₄₄; implies all others).

ALL_CAPABILITIES

Every capability wire ID, in increasing-codimension order. Used to validate identifiers at the API boundary; the geometric definitions live in policy/policy.toml.

KNOWLEDGE_READ

Query entities, triples, and the knowledge-graph timeline.

KNOWLEDGE_WRITE

Add or invalidate knowledge-graph triples.

MEMORY_READ

Read memory palace entries.

MEMORY_WRITE

Store palace entries (dedup-aware).

MINING_REVIEW

Read and accept/reject the mining review queue.

MINING_TRIGGER

Trigger a mining/extraction pass over session context.

POLICY_GRASSMANNIAN

The Grassmannian Ijima’s policy lives on: Gr(4,8), dimension 16. Selected by Schubert’s recommender for Ijima’s multi-tenant (3-namespace, 5-role) constraint set.

SESSION_INGEST

Append raw session-context turns to the repository.

TRUST_ENDORSE

Endorse mined/auto content as Explicit — a cross-tier jump (codim 5).

TRUST_OVERRIDE

Override local authority (accept conflicting content) — Phase 5 (codim 6).

TRUST_PROMOTE

Promote content to a higher trust tier / shared namespace. Replaces the plain memory:write check on promote_memory (codim 4, a consequential write on par with mining:trigger).

Functions

intersection_number

The Schubert intersection number (codimension) of a capability’s partition — the geometric weight used for rate-limiting capacity.