Block a user
[Task] Browse libraries/folders/files read-only at first
Implemented the first read-only connector browse slice. Added GET /api/v1/files/connectors/profiles/{profile_id}/browse with visible-profile governance, connector policy enforcement for operation=b…
[Task] Browse libraries/folders/files read-only at first
[Task] Configure connector endpoints and credentials through governance-aware settings
[Task] Configure connector endpoints and credentials through governance-aware settings
Implemented governed connector profile settings for endpoint/credential configuration. Profiles can be loaded from GOVOPLAN_FILES_CONNECTOR_PROFILES_JSON or GOVOPLAN_FILES_CONNECTOR_PROFILES_FILE,…
[Feature] Add connector blacklist/whitelist policy handling
[Feature] Add connector blacklist/whitelist policy handling
Codex State: done
Summary
- Implemented connector blacklist/whitelist handling in the files connector policy evaluator.
- Policy sources support allow/allowlist/whitelist and deny/denylist…
[Task] Apply hierarchical allow/deny policy before connector access
[Task] Apply hierarchical allow/deny policy before connector access
Codex State: done
Summary
- Added a files-owned connector policy evaluator that returns the shared PolicyDecision shape with source_path provenance for ordered system/tenant/user/group/cam…
[Task] Copy/freeze selected files into managed storage for execution evidence
[Task] Copy/freeze selected files into managed storage for execution evidence
Codex State: done
Summary
- Closed for the managed-storage freeze/evidence layer: selected files are stored as managed FileAsset/FileVersion/FileBlob records, and campaign builds record…
[Task] Audit connector access and import actions
[Task] Audit connector access and import actions
Codex State: done
Summary
- Added connector-focused audit events for provenance-bearing managed files.
- Uploads and ZIP imports with source_provenance now emit files.connector.imported…
[Task] Store source provenance and source revision metadata
[Task] Store source provenance and source revision metadata
Codex State: done
Summary
- Added a canonical metadata-backed source provenance contract for managed files: uploads accept source_provenance_json/source_revision, responses expose…
[Task] Avoid live remote file dependency at send time for MVP
[Task] Avoid live remote file dependency at send time for MVP
Codex State: done
Summary
- Verified the MVP send path no longer depends on live managed storage or future connector reads after build.
- Added a regression that builds a managed-file…
[Task] Harden remote module catalog trust state and replay validation
[Task] Harden remote module catalog trust state and replay validation
Codex State: done
Summary
- Hardened remote module catalog validation. URL-backed catalogs now report cache fallback metadata while still validating the cached body with signature,…
[Feature] Add license entitlement diagnostics and issuance workflow hooks
[Feature] Add license entitlement diagnostics and issuance workflow hooks
Codex State: done
Summary
- Implemented license entitlement diagnostics and issuance hooks. Core now exposes signed offline license issuance, structured diagnostics, CLI validation/issuanc…