feat(core): bind enterprise approvals to immutable intent - #220

Open

seonghobae wants to merge 55 commits into

mainfrom

feat/enterprise-approval-intent-lifecycle

Commits on Aug 23, 2026

test(core): specify enterprise approval lifecycle
seonghobae
committed
e9a931c
test(policy): locate enterprise approval lifecycle boundary
seonghobae
committed
fc8dd10
test(policy): move enterprise approval lifecycle regression
seonghobae
committed
e55aa15
test(policy): format enterprise approval lifecycle regression
seonghobae
committed
bee1d34
feat(policy): implement enterprise approval lifecycle
seonghobae
committed
0431c4c
feat(policy): expose enterprise approval lifecycle
seonghobae
committed
5ca0d73
style(policy): apply canonical Rust formatting
seonghobae
committed
c63ba3c
test(policy): cover approval terminal transition guards
seonghobae
committed
0d32899
style(policy): apply canonical Rust formatting
seonghobae
committed
88a5086
test(core): reject approval clock rollback
seonghobae
committed
f1432f5
fix(core): enforce monotonic approval lifecycle time
seonghobae
committed
c80b552
test(core): pin approval rollback error contract
seonghobae
committed
f120367
style(core): apply canonical approval time formatting
seonghobae
committed
369aa6c
test(core): forbid cloning approval accounting state
seonghobae
committed
e634a63
fix(core): make approval accounting state non-cloneable
seonghobae
committed
f9b5937
style(core): satisfy strict clone-contract clippy
seonghobae
committed
08390f8
test(policy): cover monotonic pending transitions
seonghobae
committed
44947cd
docs(changelog): record enterprise approval lifecycle
seonghobae
committed
e54ce8f
test(policy): prevent enterprise approval replay
seonghobae
committed
fb6113e
test(policy): format approval replay regression
seonghobae
committed
98ea5c7
fix(policy): make consumed enterprise approvals one-shot
seonghobae
committed
618ad1e
fix(policy): apply canonical approval-use formatting
seonghobae
committed
2a95e1e
docs(policy): record one-shot enterprise approval authority
seonghobae
committed
8015ae6
docs(policy): index enterprise approval ADR
seonghobae
committed
ed4cab1

Commits on Aug 25, 2026

chore(policy): realign enterprise approval to protected main
seonghobae
committed
2fb49a3
test(policy): pin approval-use expiry at evaluation
seonghobae
committed
ee3cac4
fix(policy): revalidate approval expiry at evaluation
seonghobae
committed
09df6e0
docs(policy): bound approval use lifetime and crash claims
seonghobae
committed
ad2b515
docs(policy): make checker authorization boundary explicit
seonghobae
committed
158fe1c
test(policy): pin revocation of outstanding enterprise approval use
seonghobae
committed
bc6c99f
fix(policy): invalidate outstanding uses after checker revocation
seonghobae
committed
cc59746
docs(policy): bind outstanding uses to checker revocation
seonghobae
committed
185cf67
test(core): revoke exhausted outstanding approval use
seonghobae
committed
6ad9c10
fix(core): revoke exhausted outstanding approval uses
seonghobae
committed
8e2491b
docs(adr): revoke final outstanding enterprise uses
seonghobae
committed
0ee005d
test(policy): protect approval scope privacy at expiry
seonghobae
committed
1a6d50c
test(policy): format approval scope privacy regression
seonghobae
committed
af251ad
fix(policy): enforce approval scope before lifecycle state
seonghobae
committed
4d8bad3
test(policy): protect actor identity before expiry state
seonghobae
committed
2059a6f
test(policy): apply canonical formatting
seonghobae
committed
6d461d9
fix(policy): validate actor identity before lifecycle state
seonghobae
committed
9205583
test(approval): reject bidi controls in principal refs
seonghobae
committed
ae36811
fix(approval): reject bidi controls in principal refs
seonghobae
committed
6ba9d89
docs(approval): bind principal display safety to Unicode bidi controls
seonghobae
committed
7dd5c84
docs(standards): record Unicode bidi-control identity boundary
seonghobae
committed
d7de052
docs(changelog): record principal bidi-control hardening
seonghobae
committed
cda5538
docs(approval): clarify actor separation boundary
seonghobae
committed
4d27493
test(policy): cover observed expiry invalidation
seonghobae
committed
093a8a9
fix(policy): invalidate issued uses on observed expiry
seonghobae
committed
a8b9498
docs(adr): bind issued uses to observed terminal expiry
seonghobae
committed
cfabd8b
fix(policy): apply canonical rustfmt to terminal invalidation
seonghobae
committed
1030018
test(policy): reject approval use scope drift
seonghobae
committed
ce001d3
test(policy): format approval scope regressions
seonghobae
committed
248740a
fix(policy): bind approval use to exact request scope
seonghobae
committed
f04980c
docs(adr): align approval-use scope ordering
seonghobae
committed
e0740a6