Granular access control: per-verb permissions, denials, and the _acl block - #1122

Merged

coodos merged 7 commits into

mainfrom

feat/acl-permissions

Aug 31, 2026

Commits on Aug 31, 2026

feat: add the granular access control engine
coodos
committed
79de2f6
feat: store and enforce granular access policies in eVault
coodos
committed
d2af4cf
docs: document access control and how platforms implement it
coodos
committed
8d199f1
feat: let a platform declare the user it acts for, and expose the policy in force
coodos
committed
32d0371
docs: document the on-behalf-of header and reading policies back
coodos
committed
3eed971
fix: reject a malformed policy on write instead of silently dropping entries
coodos
committed
3068aa5
docs: document policy validation, errors, versioning and rollback
coodos
committed
84da8a4