WeiCHEN
b627134c62
feat(sysadmin): add system:* permissions and settings audit log
...
Seed fine-grained console permissions (goose 00065), gate admin
handlers by system:* keys, and persist settings change audits for
all upserts. KB ops and whitelist consumers stay deferred.
2026-09-23 10:09:10 +08:00
WeiCHEN
12322b6974
feat(agentctl): W4 projection apply and deploy-recover loop
...
Add CAS projection helpers and a real enqueue→claim→command→receipt
deploy path for temp-repo tests; PI image compose stays deferred.
2026-09-23 10:01:12 +08:00
WeiCHEN
0352c0996d
merge: feature/governance-automation-2026-09-22
...
Keep macOS process platform; land W4 queue/automation and cleanup-report.
2026-09-22 22:20:37 +08:00
WeiCHEN
ae001a85c1
fix(ops): copy agentctl_w4 into script test fixtures
...
Disposable Git fixtures only copied agentctl.py, so imports of the new
W4 helper module crashed before any guard assertions could run.
2026-09-22 22:08:38 +08:00
WeiCHEN
47fdeb1655
feat(agentctl): add macOS process platform layer
...
Replace Linux /proc hard dependency with Darwin ps+sysctl while keeping
zombie/group/boot three-value semantics fail-closed for unreadable PIDs.
2026-09-22 21:44:28 +08:00
weichen
8bc7940ee0
fix(herdr): scope v1.2 routing and protect shared Kimi quota
...
Align prepared clients with role budgets and automatic approvals. Keep uncertain delivery from triggering duplicate work and preserve task worktree gates.
2026-09-21 15:17:20 +00:00
weichen
fed87ad14b
feat(governance): enforce managed worktrees and scoped agent operations
...
Consolidate approved policies and add local lease, document CAS, commit, candidate and environment gates. Preserve conservative recovery and cleanup limits.
2026-09-21 14:41:40 +00:00
WeiCHEN