Whether an authenticated GET may be answered from a stored shell.
On for both plans; an explicit SHELL_ASSEMBLY wins and KV_OVERRIDABLE carries it.
Safe because assembleFor() serves no visitor until their own uid passes verifyShellFor()
(a byte-for-byte re-harvest); the two-session harvest only authorises the store. The first
request per (path, role set, uid) costs 40-52 rows and breaks even after 4-13.
Whether an authenticated GET may be answered from a stored shell.
On for both plans; an explicit
SHELL_ASSEMBLYwins andKV_OVERRIDABLEcarries it.Safe because
assembleFor()serves no visitor until their own uid passesverifyShellFor()(a byte-for-byte re-harvest); the two-session harvest only authorises the store. The first request per(path, role set, uid)costs 40-52 rows and breaks even after 4-13.