From 988053ac94b259a9ee50ef787ad173a01325f1f7 Mon Sep 17 00:00:00 2001
From: "K. Isom" <kyle@imap.cc>
Date: Wed, 23 Sep 2026 08:35:01 -0700
Subject: [PATCH] orion: pin sift e36da19 (restricted workspace)

Permit straylight-gs to query guardian-star; fleet callers still refused.
---
 flake.lock           | 10 +++++-----
 flake.nix            |  2 +-
 hw/orion/default.nix |  3 ++-
 3 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/flake.lock b/flake.lock
index 18a1d13..fa5a0f4 100644
--- a/flake.lock
+++ b/flake.lock
@@ -446,16 +446,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1790158709,
-        "narHash": "sha256-fnjjyh6jj2yv3ADimeRQAUjLXbj/p6U5FxLyyBV2beE=",
+        "lastModified": 1790177638,
+        "narHash": "sha256-sSpJwTkl4itssYQGvx/6zu4mgNX3+qatZbkspv+k05s=",
         "ref": "refs/heads/master",
-        "rev": "767c12c1af8fe518c6436bd8827f5ff81d37fa5f",
-        "revCount": 25,
+        "rev": "e36da19f57b2e5d0374d1c1fa8aecf6156fa58fe",
+        "revCount": 27,
         "type": "git",
         "url": "ssh://git@git.wntrmute.dev/kyle/sift"
       },
       "original": {
-        "rev": "767c12c1af8fe518c6436bd8827f5ff81d37fa5f",
+        "rev": "e36da19f57b2e5d0374d1c1fa8aecf6156fa58fe",
         "type": "git",
         "url": "ssh://git@git.wntrmute.dev/kyle/sift"
       }
diff --git a/flake.nix b/flake.nix
index 0b279f0..4f66df8 100644
--- a/flake.nix
+++ b/flake.nix
@@ -23,7 +23,7 @@
     tracker.url = "git+https://git.wntrmute.dev/kyle/tracker";
     tracker.inputs.nixpkgs.follows = "nixpkgs";
 
-    sift.url = "git+ssh://git@git.wntrmute.dev/kyle/sift?rev=767c12c1af8fe518c6436bd8827f5ff81d37fa5f";
+    sift.url = "git+ssh://git@git.wntrmute.dev/kyle/sift?rev=e36da19f57b2e5d0374d1c1fa8aecf6156fa58fe";
     sift.inputs.nixpkgs.follows = "nixpkgs";
 
     tether.url = "git+ssh://git@git.wntrmute.dev/kyle/tether?rev=c89894b8dcac89aaea9ad72529524c1204884bc0";
diff --git a/hw/orion/default.nix b/hw/orion/default.nix
index 480a5c8..ec85806 100644
--- a/hw/orion/default.nix
+++ b/hw/orion/default.nix
@@ -97,7 +97,8 @@
         };
         context = {
           honcho = "http://rift.scylla-hammerhead.ts.net:8000";
-          workspaces = [ "hermes-fleet" ];
+          workspaces = [ "hermes-fleet" "guardian-star" ];
+          permit_restricted = [ "straylight-gs" ];
         };
       };
     };