std/confirm-an-action-in-a-browser-you-drive as a composition

The members, drawn end to end

What running all of this would mean

• 1 capability across 2 procedures: cli:curl. Running this composition means granting all of them at once, which is more than any one member asked for.
• Trust T2. A composition cannot be more trustworthy than the part you did not check.
• Highest risk: reversible-write. One destructive member makes this a destructive procedure whatever the others are.

Capability union: cli:curl

Trust T2

Members

• std/confirm-an-action-in-a-browser-you-drive — T2, the record you came from, published by std
• std/publish-through-a-browser-already-signed-in — T2, pulled in by requires, published by std

Take it with you

A composition exports as a list of pinned references, not as a merged procedure. Merging would produce a document whose steps have lost their publisher, their trust and their provenance — and the first thing anybody would do with it is run it.

# A composition, as references. Not a merged procedure: each member keeps its
# publisher, its trust level and its provenance, and there is nothing here to run.
# Trust T2 (the weakest member). Highest risk reversible-write.
# Capabilities granted if you run all of it: cli:curl.

std/confirm-an-action-in-a-browser-you-drive@1.0.0  # root, T2
std/publish-through-a-browser-already-signed-in@1.0.0  # requires, T2