tasks:touch-close
tasks family
A person closes a row with Touch ID: the passkey assertion must belong to the caller's own web session (never a body field), over the challenge hash({ tasks: 'touch-close', tid, nonce }); only then is the row set done through tasks:status under the same caller, and the thread says who closed it. A key, an agent or a workflow step is refused
- Effect
- ask
- Awaits an outcome — the call returns the response below.
- Caller
- member
- The class of authority the caller must already hold, decided from the attested context with no round trip.
- Reversible
- yes
- The effect can be undone by a later call.
- Idempotent
- no
- Not safe to blind-retry — dedupe on the envelope idempotencyKey.