feat(expr): ADR-0058 P1–P4 — canonical CEL→FilterCondition compiler, RLS/sharing cutover, check enforcement, conformance ledger#2090

Merged

xuyushun441-sys merged 7 commits into

mainfrom

feat/expression-pushdown-compiler

Jun 21, 2026

Commits on Jun 21, 2026

feat(formula): ADR-0058 P1 — canonical CEL→FilterCondition pushdown compiler

os-zhuang
and
claude
committed
refactor(security,sharing): ADR-0058 P2 — cut RLS + sharing over to the one compiler

os-zhuang
and
claude
committed
feat(sharing): ADR-0058 D3 — close #1887, compound sharing conditions enforced e2e

os-zhuang
and
claude
committed
feat(security): ADR-0058 D4 — enforce the RLS `check` clause on writes

os-zhuang
and
claude
committed
test(dogfood): ADR-0058 D7 — Expression Surface Conformance ledger + CI ratchet

os-zhuang
and
claude
committed
chore(changeset): ADR-0058 expression compiler (closes #1887)

os-zhuang
and
claude
committed
fix(expr): resolve 2 CodeQL alerts in the ADR-0058 changes

os-zhuang
and
claude
committed