feat(authz): ADR-0066 Phase 1 — secure-by-default object posture + requiredPermissions (D2/D3)#2235

Merged

xuyushun441-sys merged 6 commits into

mainfrom

feat/adr0066-authz-phase1

Jun 23, 2026

Commits on Jun 23, 2026

docs(adr): refine ADR-0066 — posture-gated superuser RLS bypass, precedence order, roadmap

os-zhuang
and
claude
committed
feat(spec): ADR-0066 D2/D3 — object access posture + requiredPermissions

os-zhuang
and
claude
committed
feat(plugin-security): ADR-0066 D2/D3 — enforce private posture, requiredPermissions, posture-gated RLS bypass

os-zhuang
and
claude
committed
chore(spec): classify ADR-0066 object.access + object.requiredPermissions in liveness ledger

os-zhuang
and
claude
committed
chore(spec): refresh api-surface snapshot for ObjectAccessConfig (ADR-0066 D2)

os-zhuang
and
claude
committed
fix(runtime): platform-scoped (null-org) permission grants resolve under an active org

os-zhuang
and
claude
committed