v2: Action policies + audit — org policy engine, grants, action log - #140

Merged

yourbuddyconner merged 21 commits into

dev-v2from

feat/action-policies

Aug 14, 2026

Commits on Jul 18, 2026

docs(plans): action policies + audit implementation plan
yourbuddyconner
committed
7dce55a
feat(engine): policyResolver seam — resolve, gate actions, audit emission
yourbuddyconner
committed
5642d2b
fix(engine): invocation records carry gate ordinal + resumeKey; reserved gate ids rejected
yourbuddyconner
committed
a541c98
feat(api): policy tables + matcher engine + pure resolution core
yourbuddyconner
committed
27016ef
feat(api): policy resolver wiring — grants, audit, workflow enforcement
yourbuddyconner
committed
9c184e0
feat(api): policy routes — CRUD, action log, overrides, grants
yourbuddyconner
committed
53112cb
fix(api): cross-dimension override bounds + pagination tie test
yourbuddyconner
committed
d7c22fc
fix(api): actionId override bounds check workflow appliesIn too
yourbuddyconner
committed
4a3d1c2
feat(web): policies, action log, overrides + grants surfaces
yourbuddyconner
committed
e5b27f9
fix(web): op-aware matcher value typing; drop dead preview hook
yourbuddyconner
committed
e7d8a3f
test(api): action-policies e2e exit-criteria loop
yourbuddyconner
committed
4a314d6
docs(specs): action policies + audit implemented
yourbuddyconner
committed
1b52ffc
fix(api): override bounds matcher-blind; deterministic policy tie-break
yourbuddyconner
committed
c1f9aa9
fix(api): action-log createdAt keyset; preview plugin default; docs
yourbuddyconner
committed
ad92bce
test(api): pin matcher-carrying org policy blocks allow override
yourbuddyconner
committed
2b9a54e
docs(handoff): spec #6 complete, PR #140 open
yourbuddyconner
committed
080290c

Navigation Menu

Uh oh!

v2: Action policies + audit — org policy engine, grants, action log - #140

v2: Action policies + audit — org policy engine, grants, action log#140
yourbuddyconner merged 21 commits into
dev-v2from
feat/action-policies

Commits on Jul 18, 2026

docs(plans): action policies + audit implementation plan

feat(engine): policyResolver seam — resolve, gate actions, audit emission

fix(engine): invocation records carry gate ordinal + resumeKey; reserved gate ids rejected

feat(api): policy tables + matcher engine + pure resolution core

feat(api): policy resolver wiring — grants, audit, workflow enforcement

feat(api): policy routes — CRUD, action log, overrides, grants

fix(api): cross-dimension override bounds + pagination tie test

fix(api): actionId override bounds check workflow appliesIn too

feat(web): policies, action log, overrides + grants surfaces

fix(web): op-aware matcher value typing; drop dead preview hook

test(api): action-policies e2e exit-criteria loop

docs(specs): action policies + audit implemented

fix(api): override bounds matcher-blind; deterministic policy tie-break

fix(api): action-log createdAt keyset; preview plugin default; docs

test(api): pin matcher-carrying org policy blocks allow override

docs(handoff): spec #6 complete, PR #140 open

Commits on Aug 14, 2026

merge dev-v2 into feat/action-policies — revive the policy engine arc

test(e2e): register policies.e2e in the integration-core suite list

fix(policies): close the four owed T6 follow-ups

fix(policies): adversarial-review fixes — command-path resolver, controlled config errors, org-scoped audit updates, provenance strings

merge dev-v2 (GITHUB_APP_* env fallback + CI fix)