Add definition governance policy
This commit is contained in:
@@ -29,3 +29,10 @@ it. The resolver reads an optional `maximum_visibility` ceiling from the
|
||||
Missing policy is unrestricted, while malformed explicit policy fails closed
|
||||
to aggregate-only visibility. This resolver slice intentionally has no policy
|
||||
management endpoint or UI yet.
|
||||
|
||||
Policy also provides `policy.definitionGovernance` for Dataflow and Workflow
|
||||
libraries. It evaluates view, edit, run/start, reuse, derive, and automation
|
||||
actions across system, tenant, group, and user scopes. Templates cannot run or
|
||||
be automated. Derived definitions retain ancestor ceilings, and every
|
||||
decision includes the ordered Policy source path and effective limits so a UI
|
||||
can explain why an action is available or blocked.
|
||||
|
||||
Reference in New Issue
Block a user