Skip to content

P1.5-C: plan materialization authorization boundary - #23

Merged
Li-Sanze merged 1 commit into
mainfrom
plan/p15-plan-materialization-auth
May 5, 2026
Merged

P1.5-C: plan materialization authorization boundary#23
Li-Sanze merged 1 commit into
mainfrom
plan/p15-plan-materialization-auth

Conversation

@Li-Sanze

@Li-Sanze Li-Sanze commented May 5, 2026

Copy link
Copy Markdown
Collaborator
  • PLAN_PACKAGE_POLICIES: replace confirm with authorized_only
  • Router: default plan_package_policy → authorized_only (non-command)
  • Engine: authorization check in _advance_planning_route; unauthorized planning requests downgrade to consult surface with guard artifacts
  • Router: remove single-char 修/补 from _ACTION_KEYWORDS
  • Smoke test + regression tests updated for consult downgrade behavior
  • Design/tasks docs aligned with implementation

Context-Checkpoint: C

Summary

  • Describe the scoped change.

Checkpoint Metadata

Context-Checkpoint: A|B|C|D
Decision IDs: none
Blocked by: none
Out-of-scope touched: none

- PLAN_PACKAGE_POLICIES: replace confirm with authorized_only
- Router: default plan_package_policy → authorized_only (non-command)
- Engine: authorization check in _advance_planning_route; unauthorized
  planning requests downgrade to consult surface with guard artifacts
- Router: remove single-char 修/补 from _ACTION_KEYWORDS
- Smoke test + regression tests updated for consult downgrade behavior
- Design/tasks docs aligned with implementation

Context-Checkpoint: C
@Li-Sanze
Li-Sanze merged commit 0590baf into main May 5, 2026
2 of 4 checks passed
@Li-Sanze
Li-Sanze deleted the plan/p15-plan-materialization-auth branch May 7, 2026 02:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant