weichen ffa41d78df feat(ctxmgr): wire fail-closed gray REPLACE for chat semantic narrative ...

Unseal SEMANTIC_SUMMARY_REPLACE under explicit user authorization with a
defense-in-depth session allowlist (SEMANTIC_SUMMARY_REPLACE_SESSIONS):
swap happens only for allowlisted sessions after result digests and served
watermark validation, bounded narrative size; facts/counts stay deterministic
and the daily digest stays advisory. Master flag alone replaces nothing.

2026-09-25 22:56:36 +00:00

..

apply.go

feat(sysadmin): admin env settings + maintenance FD handoff

2026-09-24 23:20:20 +00:00

features.go

feat(ctxmgr): wire fail-closed gray REPLACE for chat semantic narrative

2026-09-25 22:56:36 +00:00

policy_test.go

feat(sysadmin): add system:* permissions and settings audit log

2026-09-23 10:09:10 +08:00

policy.go

feat(sysadmin): CAS author-only policy with transactional audit

2026-09-17 09:15:15 +00:00

service_test.go

feat(ctxmgr): wire fail-closed gray REPLACE for chat semantic narrative

2026-09-25 22:56:36 +00:00

service.go

feat(sysadmin): admin env settings + maintenance FD handoff

2026-09-24 23:20:20 +00:00

settings_secret_test.go

feat(sysadmin): admin env settings + maintenance FD handoff

2026-09-24 23:20:20 +00:00

settings_test.go

feat(sysadmin): admin env settings + maintenance FD handoff

2026-09-24 23:20:20 +00:00

settings.go

feat(maintenance): wire sysadmin ui.* whitelist settings to public site status

2026-09-25 16:33:56 +00:00

store_pg_test.go

feat(sysadmin): add system:* permissions and settings audit log

2026-09-23 10:09:10 +08:00

store.go

feat(sysadmin): admin env settings + maintenance FD handoff

2026-09-24 23:20:20 +00:00