Classify the thread transcript routes

The web thread viewer landed without a route-authority entry, so
`/threads` read as unclassified and the inventory test was red on main.
The prefix is authenticated: the list is the account's own, and a thread
the reader may not read answers 404, so even the wider `ledger` tier
(THREAD-002) only widens among signed-in readers.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GoYpb8FEmdxVErsv7ABCYi

Co-Authored-By

Claude Fable 5 <noreply@anthropic.com>

Claude-Session

https://claude.ai/code/session_01GoYpb8FEmdxVErsv7ABCYi

Deploy story

What this commit did to the running system — joined from the forge receipt chain, the part a commit page elsewhere cannot show.

pushed

by user · WAL seq 310 · 2026-08-24T21:05:36.720199Z

Changed files

• modified lib/openagents_web/route_authority.ex

Diff

1 file changed, +5 -0

    # The inbox addresses exactly one account, so it has nothing to show a

    # visitor who has not identified themselves.

    "/notifications",

    # Thread transcripts. The list is the account's own, and a thread the

    # reader may not read answers 404 rather than 403, so the prefix is

    # authenticated even where a thread's own tier widens who may read it

    # (THREAD-002): the wider audience is still signed in.

    "/threads",

    "/settings/api-tokens",

    "/github/connection",

    "/api/tokens",