feat(acp): implement harness-level tool permission policy (#4938) - #5106

Open

wpfleger96 wants to merge 15 commits into

mainfrom

duncan/permission-policy

Commits on Aug 6, 2026

feat(acp): implement permission policy (#4938)

Duncan
and
wpfleger96
committed
127298f
feat(desktop): permission policy config + actionable Allow/Deny card (#4938)

Hayt
and
wpfleger96
committed
d8be338
fix(desktop): control_result is delivery confirmation, not terminal outcome

Hayt
and
wpfleger96
committed
90e3292
Merge remote-tracking branch 'origin/hayt/permission-policy' into duncan/permission-policy
Duncan
committed
4f72c3c
feat(acp): add PermissionMode::Auto + contradiction matrix rows (#4938)

Duncan
and
wpfleger96
committed
6dbbc67
fix(acp): address Thufir pass-1 CRITICAL and IMPORTANT findings (#4938)

Duncan
and
wpfleger96
committed
b3b1b3b
fix(acp): address Thufir pass-2 review findings (#4938)

Duncan
and
wpfleger96
committed
96538e9

Commits on Aug 7, 2026

fix(acp): structural round — one nonce-keyed permission record, finish_permission() helper

Duncan
and
wpfleger96
committed
6607eaf
fix(acp): address Thufir pass-4 review findings

Duncan
and
wpfleger96
committed
7d277da
fix(buzz-acp): thread single nonce through sync denial paths; upgrade two tests to pipe-level proof

Duncan
and
wpfleger96
committed
73f2ffe
test(buzz-acp): tighten equality-deadline test to pinned future + exact payload

Duncan
and
wpfleger96
committed
fcd33ff
refactor(desktop): extract permission/transcript types to fix file-size ratchet

Duncan
and
wpfleger96
committed
bcd9bac
Merge remote-tracking branch 'origin/main' into duncan/permission-policy
Duncan
committed
fe901d8
refactor(desktop): extract RawManagedAgent/fromRawManagedAgent to managedAgentMapping.ts

Duncan
and
wpfleger96
committed
2dd0706
fix(desktop): use struct literal init to satisfy clippy::field_reassign_with_default

Duncan
and
wpfleger96
committed
e87f265