5 Commits

Include renames

Author	SHA1	Message	Date
agent-exec-transport	612e04402d	agent-exec transport be0c4744ff5899017313eb3f4fbd4a3f/43fe057c8332	2026-10-20 11:57:53 +00:00
agent-exec-transport	afb65c5678	agent-exec transport dd2fa5d8f3774523c4c97a4afaa4360d/4fd52114d316	2026-10-19 03:08:12 +00:00
weichen	06ef17a70a	Harden delegated role authority boundaries ... Why: Independent review found delegated account actions, stale resource policy, and role migration cutover gaps in the initial U4 implementation. Evidence: Backend full SQLite suite passed; isolated PostgreSQL role and migration suite passed; independent final review found no remaining findings. Impact: Enforces transactional system grants, current role snapshots, staged role import with v36 migration, and fail-closed activation. Refs: feature/iam-u4-role-authority	2026-10-15 02:27:50 +00:00
weichen	94732f3c87	Add trusted role administration compatibility ... Why: Existing RDM role commands must reach the Backend authority during UI and migration cutover without dual-writing RDM role tables. Evidence: The full Backend suite passed, including actor-bound role administration, owner compatibility, provider, and public-surface tests. Impact: Adds temporary trusted Host administration methods and completes the project-action catalog used by RDM. Refs: Focused role and permission system task 5	2026-10-14 17:28:31 +00:00
weichen	5abd851256	Expose the role policy provider ... Why: RDM needs a trusted, non-secret view of Backend-owned role policy without importing Backend internals or accepting a caller-supplied actor. Evidence: The full Backend test suite passed, including public-surface and provider contract tests. Impact: Adds optional extension surface 2.14 with actor-bound role snapshots and action decisions. Refs: Focused role and permission system task 4	2026-10-14 17:09:11 +00:00