weichen 0270b40197 Add EXT-8b resource-level authorization contract ...

Why: 方案 r1 U9 首切片——V1（owner×project 布尔）无法表达资源粒度判定，读面（下载/列表/检索/模型上下文）需要执行端按资源咨询下游。
Evidence: 红：resource_authz_v2_test.go 编译红（ResourceAuthzQuery/V2 未定义）；绿：pkg/extension surface 棘轮（2.10.0）+ internal/app 槽位测试（V2 咨询/V1 回落/字段缺失拒/error fail-closed/首注册者生效/compiled 拒绝）；go test ./... 全绿（收据 /tmp/be-v2-test.txt）。
Impact: 公开面新增 ResourceAuthzQuery/ResourceAuthorizerV2/Registry.RegisterResourceAuthorizerV2；projectAuthz 增 V2 槽（AuthorizeResource：V2 优先、V1 兼容回落、受信字段缺失＝拒）；compiledRegistry fail-closed 拒绝声明式注册；读路径消费接线（server 5 处 authorizeSharedProject 升级）留待下一切片。
Refs: 方案 r1 U9/KTD2；RDM EXT-8 现有消费者（hostcaps/projectAuthz）

2026-10-12 11:44:00 +00:00

..

link

Add the EXT-16 exec backend interface: direct status quo and bwrap sandbox

2026-10-09 17:01:32 +00:00

extension.go

Add EXT-8b resource-level authorization contract

2026-10-12 11:44:00 +00:00

host.go

Add AdminProvider capability and HostProjectID context (EXT-18)

2026-10-11 16:23:15 +00:00

hostclient.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

resource_authz_v2_test.go

Add EXT-8b resource-level authorization contract

2026-10-12 11:44:00 +00:00

surface_test.go

Expose builtin document parsing through the host handle

2026-10-06 14:59:38 +00:00

surface.txt

Add EXT-8b resource-level authorization contract

2026-10-12 11:44:00 +00:00