Add definition governance policy

This commit is contained in:
2026-07-28 15:04:03 +02:00
parent 1063622d31
commit d6e09fbbd1
5 changed files with 486 additions and 1 deletions

View File

@@ -29,3 +29,10 @@ it. The resolver reads an optional `maximum_visibility` ceiling from the
Missing policy is unrestricted, while malformed explicit policy fails closed
to aggregate-only visibility. This resolver slice intentionally has no policy
management endpoint or UI yet.
Policy also provides `policy.definitionGovernance` for Dataflow and Workflow
libraries. It evaluates view, edit, run/start, reuse, derive, and automation
actions across system, tenant, group, and user scopes. Templates cannot run or
be automated. Derived definitions retain ancestor ceilings, and every
decision includes the ordered Policy source path and effective limits so a UI
can explain why an action is available or blocked.