feat: layered opt-in permission system (P0–P2.2) — rules, approval, audit, guardrail prompt#1127

Merged

ncrispino merged 15 commits into

dev/v0.1.97from

feat/permissions-p2-audit

Jun 12, 2026

Commits on Jun 12, 2026

feat(permissions): P1.3 — per-agent scoping via role presets

ncrispino
and
claude
committed
feat(permissions): P1.2 FileApprovalProvider + P1.3 read-only→SRT backstop

ncrispino
and
claude
committed
feat(permissions): P2.1 ApprovalLedger audit trail + ApprovalBudget

ncrispino
and
claude
committed
feat(permissions): P2.2 — wire ApprovalBudget, persist 'always' grants, parity guard

ncrispino
and
claude
committed
docs(permissions): add interactive-modal demo config + P2.2 follow-ups note

ncrispino
and
claude
committed
docs(permissions): demo uses Gemini (modal fires) + record egress-bypass finding

ncrispino
and
claude
committed
feat(permissions): channel-based guardrail policy in system prompt (when active)

ncrispino
and
claude
committed
feat(permissions): render denied tool calls as first-class failed tool events

ncrispino
and
claude
committed
docs(permissions): record 3-run alignment≠enforcement evidence + WAN-34

ncrispino
and
claude
committed
docs(release): prep v0.1.97 — Application-Layer Permission Engine

ncrispino
and
claude
committed
Merge dev/v0.1.97 into feat/permissions-p2-audit (resolve ROADMAP rename + version bump)
ncrispino
committed