Move built-in policies to installable policy packs - #735

Closed

chhhee10 wants to merge 17 commits into

mainfrom

feat/policy-home-migration

Commits on Aug 21, 2026

Put a pack on a machine, and refuse the ones that could not work
chhhee10
committed
0101372
Take the pack source a person actually has
chhhee10
committed
686785c
Prove a pack stops a tool call, not merely that it loads
chhhee10
committed
24abd0f
Stop four handler tests reading whoever-runs-them's real pack directory
chhhee10
committed
765d947
Stop a pack's verdict being recorded as nobody's and its crash as ours
chhhee10
committed
8b2bb8c
Ship the builtins as a pack, and compare it against the compiled ones
chhhee10
committed
eded0c5
Stop `policies --install` deleting the policies it cannot name
chhhee10
committed
1556fed
File a pack's decision under the pack that made it
chhhee10
committed
48ad22e
Install what a pack recommends, not everything it contains
chhhee10
committed
25d8f08
Install the builtins pack from the package, with no network
chhhee10
committed
3554263
Refuse when a pack this machine enforces is not running
chhhee10
committed
3f063a4
docs: date policy migration changelog
chhhee10
committed
c4576e2
fix: address policy pack review feedback
chhhee10
committed
1ee89a9