@@ -46,7 +46,8 @@ export type GateInputs = {
4646 // the pattern used by `canAccessAi`, `canAccessPrivateConnections`, and the
4747 // compute-template beta gate.
4848 orgFeatureFlags : Record < string , unknown > | null ;
49- // Trigger options that drive C1/C3/F4 bypasses. The mollify path can't
49+ // Trigger options that drive the debounce / OTU / triggerAndWait
50+ // bypasses. The mollify path can't
5051 // serialise stateful callbacks (debounce), can't safely break OTU's
5152 // synchronous-rejection contract, and shouldn't intercept single
5253 // triggerAndWait (batchTriggerAndWait still funnels through per item).
@@ -151,25 +152,23 @@ export async function evaluateGate(
151152) : Promise < GateOutcome > {
152153 const d = { ...defaultGateDependencies , ...deps } ;
153154
154- // C1 — debounce bypass. onDebounced is a closure over webapp state and
155+ // Debounce bypass. onDebounced is a closure over webapp state and
155156 // can't be snapshotted into the buffer for drainer replay. Skip before the
156157 // trip evaluator so debounce traffic is never counted against the rate.
157158 if ( inputs . options ?. debounce ) {
158159 d . recordDecision ( "pass_through" ) ;
159160 return { action : "pass_through" } ;
160161 }
161- // C3 — OneTimeUseToken bypass. OTU is a security feature on the PUBLIC_JWT
162+ // OneTimeUseToken bypass. OTU is a security feature on the PUBLIC_JWT
162163 // auth path; its synchronous-rejection contract is materially worse to
163- // break than the idempotency-key contract. Sibling brief:
164- // `_plans/2026-05-13-mollifier-otu-protection.md`.
164+ // break than the idempotency-key contract.
165165 if ( inputs . options ?. oneTimeUseToken ) {
166166 d . recordDecision ( "pass_through" ) ;
167167 return { action : "pass_through" } ;
168168 }
169- // F4 — single triggerAndWait bypass. batchTriggerAndWait still funnels
169+ // Single triggerAndWait bypass. batchTriggerAndWait still funnels
170170 // through TriggerTaskService.call per item so the dominant burst pattern
171- // remains covered. Sibling brief:
172- // `_plans/2026-05-13-mollifier-trigger-and-wait-protection.md`.
171+ // remains covered.
173172 if ( inputs . options ?. parentTaskRunId && inputs . options ?. resumeParentOnCompletion ) {
174173 d . recordDecision ( "pass_through" ) ;
175174 return { action : "pass_through" } ;
0 commit comments