fix: align auditor channel perms, extend desk gate to tests, drop stale usage-event doc

- permissions: the Auditor is a silent, read-only observer with no say/dm in
  its verb surface, so can_write_channel now returns False for it — matching
  the role's real capabilities instead of granting an unreachable channel
  write (test updated to assert read-only).
- Makefile: make lint and make gate now type-check mypy roboco/ tests/, matching
  make quality / make quality-fast, so the developer-desk gate also catches test
  type errors before submit (tests/ is already mypy-clean).
- docs: CLAUDE.md no longer lists USAGE_UPDATE — only USAGE_SNAPSHOT is published
  to /ws/system.
This commit is contained in:
Renn F
2026-06-15 08:13:53 +02:00
parent ba74eb4fd2
commit 77771c280c
4 changed files with 10 additions and 9 deletions
+3 -3
View File
@@ -65,10 +65,10 @@ def test_ceo_can_write_any_channel(svc: PermissionService) -> None:
assert svc.can_write_channel(ceo, "backend-cell")
def test_auditor_can_write_any_channel(svc: PermissionService) -> None:
"""Auditor write returns True (cover-maintenance is a convention)."""
def test_auditor_cannot_write_any_channel(svc: PermissionService) -> None:
"""Auditor is a silent, read-only observer — it cannot write to channels."""
auditor = _ctx(AgentRole.AUDITOR)
assert svc.can_write_channel(auditor, "backend-cell")
assert not svc.can_write_channel(auditor, "backend-cell")
def test_main_pm_can_write_any_channel(svc: PermissionService) -> None: