docs(changelog): record T-15 — a feedback message to tower-control may have no sender

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 23:38:04 +02:00
parent 8ec89336df
commit 2e825d9080
1 changed files with 12 additions and 0 deletions
@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

 ## [Unreleased]

+### Added
+
+- **A `feedback` message to `tower-control` may have no sender** (`scribe_messages.from_identity`
+  nullable, migration 010, core-api T-15 / workspace D-70) — the failure channel must not depend
+  on the thing most likely to break. `POST /scribe/messages` accepts a missing
+  `X-Office-Identity` for exactly one shape: an office caller, `to` is `["tower-control"]` alone,
+  and `tags` contains `feedback`; stored with `from_identity` null and `from_consumer` the
+  caller's consumer. Every other send without an identity is still 400 `identity_required`, and
+  a `user`-kind caller gains nothing from the exemption. `MessageResponse.from_identity` is now
+  optional, so `mailbox`, `history`, `find` and the `message_id` lookup all answer such a message
+  with a null sender.
+
 ## [1.14.0] - 2026-10-19

 ### Added