Skip to content
JANUS DOCS

Ambient Authority Lint

Ambient Authority Lint

Section titled “Ambient Authority Lint”

Janus now ships janus lint --ambient-authority.

The command checks the current public OS, network, and executor facades for explicit capability-token variants. A resource-touching public API must expose a matching _cap or _sovereign form.

Examples:

  • std.os.fs.open has std.os.fs.open_sovereign.
  • std.net.tcp.connect has std.net.tcp.connect_cap.
  • std.exec.spawn has std.exec.spawn_cap.

The compatibility forms remain available for existing callers while the ecosystem migrates. The capability-token forms are the canonical service boundary.

The build step check-ambient-authority runs the same check, and ./scripts/zb test depends on it.