main is set to fail if there's a proof in the UCAN. It's valid to have a proof: you need to show that you have the ability to delegate the requested resources (which doesn't seem to be checked right now?) What a closed UCAN is trying to do is not delegate anything, since at this stage you are just proving that you are who you claim to be (bootstrapping a secure channel).
This PR checks the correct field ✅ (No potency = authN only)
I think this was probably introduced as a typo.
main
is set to fail if there's a proof in the UCAN. It's valid to have a proof: you need to show that you have the ability to delegate the requested resources (which doesn't seem to be checked right now?) What a closed UCAN is trying to do is not delegate anything, since at this stage you are just proving that you are who you claim to be (bootstrapping a secure channel).This PR checks the correct field ✅ (No potency = authN only)