test(privacy): the hostile instance's person changes privacy as the app offers it

Seed 218 had the person make a studyset private on the laptop while the
laptop, kept by the instance from the phone's make-readable, showed it
private already: the app offers only Make non-private there, so no record
of it came. Make private and Make non-private now follow the acting
device's own view; the laptop held at its earlier record is the residual
risk ADR 0019 names.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
Tizian 「ティツィアーン」 2026-10-22 13:17:29 +02:00
commit 1c27e7eb86
Signed by: raisondetredev
GPG key ID: 07F6FCF405488B64

View file

@ -615,6 +615,12 @@ final class _World(
return;
}
final studyset = _pick(tops);
// As the app offers it: Make private where this device shows it
// readable, Make non-private where it shows it private (a device held
// at an earlier record shows what it saw).
if ((await device.privacy.ownKeyOf(studyset) != null) == private) {
return;
}
await device.studysets.setPrivate(studyset, private: private);
if (!private) {
// What is the person's to open: every item whose privacy this