Record gesture-local name inspection and drop authority boundaries

2026-09-12 04:47:30 -07:00
parent 3840ca2965
commit f1bd5149db
1 changed files with 2 additions and 0 deletions
@@ -16,6 +16,8 @@ Retain frozen visible target regions, occluders, semantic precedence and target

 The slot must remain visible and readable at the 1100-by-700 minimum, with stable toolbar/canvas bounds before, during and after the gesture. Long names may use explicit truncation with access to the full name; explanatory or refusal text must not displace the identity or paint over the diagram. Multiple incomparable targets must be identified as ambiguity, not as one accepted destination.

+Hover inspection must work during a held drag. Moving to the toolbar makes the current destination ineligible; a gesture-local copy of the most recent captured target identities may remain in the tooltip, explicitly labeled `Last target` (or ambiguous targets). These names are inspection data only and never resolve or authorize a drop. Releasing outside cancels without mutation; returning to the canvas resolves a current target again. Retiring or replacing the gesture clears its inspection data. This distinction addresses a second independent finding: a tooltip of the live destination alone loses its name as soon as the pointer leaves the canvas to inspect it.
+
 Keep selected-work viewport and zoom readability checks, exact model/source/command comparisons, pointer offsets, snap, cancellation, role/dependency rules and one-step history unchanged. Remove obsolete admission based on the location of a label that is no longer drawn on the canvas. A selected work header outside the viewport or a real card collision remains a refusal.

 ## Verification obligations