RFC: Manifest declaration for Scoped grants in trustedProducts and other subsequent declarations (WebRTC)

[filvecchiato]

Source PR: #454 · docs/rfcs/granted-scopes.md · @filvecchiato

Description

Granted gains storage and context alongside all, so a publisher can pre-approve a narrow scope list per product. trustedProducts keeps its shape — no new field, no $v bump.

Motivation

The only value today is all, which pre-approves every cross-product interaction the Host mediates, including ones added after publication. "Read my stored data, prompt for anything else" is not expressible.

Requirements

• Granted = 'all' | 'storage' | 'context' — storage is read-only storage, context is account and identity.
• all stays a superset; a narrower value never restricts it.
• Unrecognised values are ignored, never a validation failure.
• A grant never overrides a denial the user already gave.

Tasks

• RFC document body
• Implementation — rust-core
• Implementation — hosts
  • dotli
  • Desktop
  • iOS
  • Android
  • host-cli