# T07 — Lab 03: bring the request list against the model site up to date

> Rendered from .claude/briefs/T07-lab-03-asks.md in the repository. The text below is that file.
> Source: https://riskmandate.ai/admin/work/T07/ · noindex · written by scripts/site/build-admin.mjs

**From:** the n8n review §4 (two asks), the graph brief §5 (two asks), Lab 06 (two proposals not
yet on the list). **Size:** two hours. **Touches:** `site/lab-abp-requests.html`, an edition via
`render-lab-pdfs.mjs`, `site/lab-editions.json` (append).

## The task
Lab 03 is the open request list against `abp.sgit.ai`, published rather than emailed. Add:

1. **A barrier per path rather than per row.** The n8n measurement: the same operation
   setting-barred through one access path and unbarred through another, on the same account, in
   the same session. Propose the `paths` shape from T02.
2. **A word for a gate that is real but broad.** The write-up called the API key a *setting*;
   the enforcer test says the key is the grant. The four barriers cannot say the difference.
   Record the disagreement, propose nothing the model site has not been asked, and ask.
3. **Metrics and outward links on the 23 primitives**, or a sanctioned extension namespace so a
   policy can carry them without forking the grammar (T03).
4. **Lab 06's two proposals**: the barrier's companion fields and the six composition rules,
   which Lab 06 states and the register says are not yet on the list.

## Constraints
- The page's existing entries and their numbering stay as they are; new requests are appended
  with a date. A Lab page is current thinking; the editions keep the earlier state.
- Each ask cites where it came from on this site (the vault, the brief, the Lab entry).
- Cut an edition and note what separates it from the last.

## Done means
- Four new requests on the page, dated, sourced; edition cut and registered; the brief register
  entry for D6 (Lab 06) updates its `not_done` to reflect that the proposals are now listed.