| unit | needs · held · exposure | read.file.project | write.file.project | read.file.host | write.file.host | delete.file.host | read.record.history | execute.proc.host | execute.proc.self | send.endp.allowed | send.endp.world | read.cred.host | auth-as.cred.tenant | grant.cred.self | send.message.world | read.message.tenant | write.repo.project | write.repo.tenant | auth-as.cred.signing | create.record.world | write.budget.tenant | create.schedule.host | create.schedule.tenant | read.record.browsing | read.vault.tenant | send.message.tenant | write.vault.tenant | create.vault.world |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| A3 agent: architect.1 the Claude Code session | 14 · 25 · 11 | |||||||||||||||||||||||||||
| A0 compute: plan node, started from the agent's shell | 3 · 25 · 22 | |||||||||||||||||||||||||||
| A2 loop: slice 0..2 (x3) general-purpose sub-agents running node | 5 · 25 · 20 | |||||||||||||||||||||||||||
| A1 81 LLM calls through admin/tools/llm.mjs: text in, text out, no tools | 0 · 0 · 0 | |||||||||||||||||||||||||||
| A0 compute: merge node, from the agent's shell | 3 · 25 · 22 | |||||||||||||||||||||||||||
| A0 compute: plan, narrowed node --permission: reads work/ only, writes its run folder only, no child process (ran OK at 2026-11-11T15:40Z) | 3 · 4 · 1 |
The answer: Because it was started from the agent's shell: a process inherits its parent's whole reach. A0 plan needed 3 primitives and held 25. Narrowed with Node's permission model it holds 4 (the network still comes from the environment). The loops held the agent's reach too (R12 logged them). Only the LLM calls were at their altitude: text in, text out.
Lisbon Tech Fringe is independent of Web Summit and not run by its organisers. For anything official, see the organisers' official site.