Access controlled knowledge gateway functionality
This commit is contained in:
parent
e87406ac9e
commit
d923661852
20 changed files with 1486 additions and 14 deletions
|
|
@ -136,6 +136,12 @@ Protocol interfaces are provided for:
|
|||
These are contracts for future implementations. They are intentionally light
|
||||
and do not force the current CLI through a persistent backend.
|
||||
|
||||
WP-0009 adds the first concrete `AccessPolicyGateway` implementation:
|
||||
`LocalLabelPolicyGateway`. It supports labels, trust zones, path rules, enforce
|
||||
and audit modes, denied-result diagnostics, redaction, and explainable decisions.
|
||||
Relationship and rule-policy systems remain adapter protocols rather than core
|
||||
dependencies.
|
||||
|
||||
## CLI
|
||||
|
||||
Read-only inspection commands:
|
||||
|
|
@ -145,6 +151,7 @@ mkt backend list --path examples/backends
|
|||
mkt backend inspect local-sqlite-cache --path examples/backends --require snapshots --require provenance
|
||||
mkt backend snapshot-id docs/content-references.md
|
||||
mkt backend refresh-plan docs --state examples/backend-state/snapshot-state.yaml
|
||||
mkt policy check public-agent query private/doc.md --policy examples/policy/local-label-policy.yaml --path private/doc.md
|
||||
```
|
||||
|
||||
The existing `mkt cache status` remains the lightweight file-manifest change
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue