fix(tool): redact permission result reasons - #93

Open

XnLemon wants to merge 115 commits into

mainfrom

codex/phase2-tool-metadata-redaction

Commits on Jul 8, 2026

platform: add multi-tenant contracts
XnLemon
committed
ae392a2
platform/gateway: add text loop
XnLemon
committed
0cddda9
platform/toolpolicy: add governance bridge
XnLemon
committed
38636fd
platform/channeladapter: add adapter outbox skeleton
XnLemon
committed
e39271c
platform/gateway: enqueue outbound handoff
XnLemon
committed
f053160
platform/storagerouter: add storage routing contracts
XnLemon
committed
c5e55e9
platform/gateway: add session lease
XnLemon
committed
5488171
platform: add gray routing helpers
XnLemon
committed
64d0a9a
platform: add tenant budget helpers
XnLemon
committed
cf5af61
platform: validate storage migration modes
XnLemon
committed
90072df
platform: validate audit policies
XnLemon
committed
2b86679
platform: validate audit records
XnLemon
committed
08fbc12
platform: add capacity estimator
XnLemon
committed
b63b970
platform/channeladapter: replay dead letters
XnLemon
committed
4193569
platform: populate audit record ids
XnLemon
committed
78675ef
platform: validate audit sink writes
XnLemon
committed
41b6b97
platform: add usage record contracts
XnLemon
committed
b72383f
platform: add usage sink contracts
XnLemon
committed
260b3a5
platform: add config version contracts
XnLemon
committed
c62e214
platform: select config version by session gray bucket
XnLemon
committed
a74ee58
platform: add config version lifecycle helpers
XnLemon
committed
75d1af7
platform: add usage summary contracts
XnLemon
committed
1a12b0f
platform: add audit query contracts
XnLemon
committed
c44f477
platform: add config version diff contracts
XnLemon
committed
8eefe55
platform: add config gray status summary
XnLemon
committed
6b8b00c
platform: add operational action audit contracts
XnLemon
committed
c59acc4
platform: add config cache invalidation contracts
XnLemon
committed
644a03c
platform: add secret rotation status contracts
XnLemon
committed
8219105
platform: add backend migration status contracts
XnLemon
committed
e66bf9c
platform: add storage router status summary
XnLemon
committed
274747c
platform: add config operation summary contracts
XnLemon
committed
826a718
platform/toolpolicy: add approval summary contract
XnLemon
committed
ce636fe

Commits on Jul 9, 2026

fix(platform): enforce binding ACL and redact outbox errors
XnLemon
committed
bc201e0
fix(platform): redact gateway audit error reasons
XnLemon
committed
3d57ce8
fix(toolpolicy): enforce auditable policy identity
XnLemon
committed
597b46c
platform: harden identity and idempotency contracts

xianingawa-wq
authored and
XnLemon
committed
b8b802e
Merge pull request #16 from XnLemon/feat/usage-record-contracts
XnLemon
committed
6d45186
platform: tighten routing identity contracts

xianingawa-wq
authored and
XnLemon
committed
db7f629
fix(platform): reconcile hardened contracts with gateway
XnLemon
committed
8c34131
Merge pull request #32 from XnLemon/feat/platform-contracts
XnLemon
committed
2db2997
platform: add budget decision audit contracts
XnLemon
committed
8c6ffc5
Merge pull request #33 from XnLemon/feat/tool-approval-summary
XnLemon
committed
1c775a1
platform/gateway: add minimum loop acceptance test
XnLemon
committed
e29fb65
Merge pull request #34 from XnLemon/feat/budget-decision-audit
XnLemon
committed
ac3a2d4
platform/gateway: add outbound dispatch acceptance test
XnLemon
committed
b9bc7e3
Merge pull request #35 from XnLemon/feat/platform-minimum-loop-acceptance
XnLemon
committed
9ea340f
Merge pull request #36 from XnLemon/feat/platform-outbound-dispatch-acceptance
XnLemon
committed
3c337c6
platform/gateway: correlate audit trace ids
XnLemon
committed
232e3bd
platform/gateway: add trace skeleton spans
XnLemon
committed
b2d5aff
Merge pull request #37 from XnLemon/feat/platform-trace-audit-correlation
XnLemon
committed
eb4ec76
Merge pull request #38 from XnLemon/feat/platform-trace-skeleton-contract
XnLemon
committed
36deb82
platform/gateway: enable runner session trace
XnLemon
committed
6d42695
platform/gateway: add message event trace contract
XnLemon
committed
054d83b
Merge pull request #40 from XnLemon/feat/platform-runner-session-trace
XnLemon
committed
3fa9c56
Merge pull request #41 from XnLemon/feat/platform-message-event-trace
XnLemon
committed
94415bf
feat(platform): mark tool call trace spans
XnLemon
committed
f05fa12
feat(platform): trace memory search spans
XnLemon
committed
5c52f3b
feat(platform): trace memory write spans
XnLemon
committed
19f09a0
feat(platform): mark summary create trace spans
XnLemon
committed
f919d4d
fix(platform): address CI checks
XnLemon
committed
dc28c70
fix(platform): address CodeRabbit review feedback
XnLemon
committed
3daa913
fix(platform): bound in-memory sink records
XnLemon
committed
6fb7ee8

Commits on Jul 10, 2026

Commits on Jul 11, 2026

feat(platform): enforce runtime tool governance
xianingawa-wq
committed
f9a509b
fix lint failures in phase2 tool surface stack
xianingawa-wq
committed
541dd09
fix remaining user tool tracking ineffassign
xianingawa-wq
committed
a8099e4
preserve runtime builder API compatibility
xianingawa-wq
committed
4cd8329
fix base lint issues in tool execution
xianingawa-wq
committed
f1f4548
fix toolsurface lint ineffassign
xianingawa-wq
committed
dc0aa47
feat(gateway): add budget preflight gate
xianingawa-wq
committed
133a545
feat(gateway): record runner usage
xianingawa-wq
committed
3b80b0e
feat(gateway): apply model cost policy
xianingawa-wq
committed
76a1475
feat(platform): add budget usage snapshots
xianingawa-wq
committed
d6cf2ab
reduce budget snapshot validation complexity
xianingawa-wq
committed
86cabbb
feat(gateway): enforce text length channel limit
xianingawa-wq
committed
4755f64
feat(gateway): enforce file size channel limit
xianingawa-wq
committed
63d7f0f
feat(gateway): enforce channel rate limits
xianingawa-wq
committed
53ddb3a
feat(gateway): enforce mime type channel limit
xianingawa-wq
committed
06cf699
feat(gateway): enforce user concurrency limits
xianingawa-wq
committed
b930618
feat(gateway): enrich reject audit context
xianingawa-wq
committed
38232d9
feat(toolpolicy): enrich audit runtime context
xianingawa-wq
committed
5afad20
feat(platform): expand audit query dimensions
xianingawa-wq
committed
5e64885
reduce audit query filter complexity
xianingawa-wq
committed
04f34db
feat(toolpolicy): audit budget remaining summary
xianingawa-wq
committed
7d40a54
feat(platform): query redacted audit details
xianingawa-wq
committed
762411d
feat(gateway): enrich budget audit runtime context
xianingawa-wq
committed
ae9a3a8
feat(gateway): record redaction failed audit
xianingawa-wq
committed
cbdb32d
feat(platform): add tool approval audit records
xianingawa-wq
committed
4552555
feat(approval): audit tool approval runtime decisions
xianingawa-wq
committed
6849a5c
feat(gateway): propagate approval audit context
xianingawa-wq
committed
c050a3a
feat(worker): wire approval guardrail plugin
xianingawa-wq
committed
1b9d19c
feat(approval): include tool metadata in approval context
xianingawa-wq
committed
2d3787a
feat(approval): return approval denied result
xianingawa-wq
committed
7f543cd
feat(approval): record approval required metrics
xianingawa-wq
committed
bfe5e93
feat(audit): record audit write failure metrics
xianingawa-wq
committed
f3a97fd
fix runtime builder options calls in approval tests
xianingawa-wq
committed
75fb239
feat(tool): record permission denied metrics
xianingawa-wq
committed
f3b3ab1
feat(gateway): record budget denied metrics
xianingawa-wq
committed
97a5fa9
feat(gateway): record rate limit metrics
xianingawa-wq
committed
fd732fa
feat(gateway): record idempotency hit metrics
xianingawa-wq
committed
359a9f4
fix(approval): redact reviewer decision text
xianingawa-wq
committed
a8819d3
fix(platform): redact spaced secret assignments
xianingawa-wq
committed
fb85850
test(toolpolicy): cover deny audit records
xianingawa-wq
committed
75002b5
test(gateway): cover trace id tieouts
xianingawa-wq
committed
83e8ed4
fix(langfuse): redact observation exports
xianingawa-wq
committed
f9ff772
fix(platform): redact config diff secret refs
xianingawa-wq
committed
ddb6fd8
fix(artifactstore): redact storage errors
xianingawa-wq
committed
50d976d
fix(audit): reject unsafe tenant queries
xianingawa-wq
committed
402953b
fix(usage): reject unsafe summary filters
xianingawa-wq
committed
782305b
fix(trace): redact endpoint config errors
xianingawa-wq
committed
960c075
fix(secret): reject unsafe rotation tenants
xianingawa-wq
committed
2862417
fix(tool): redact permission result reasons
xianingawa-wq
committed
e163f51