One noun for policies, packs you publish yourself, and a help screen that fits - #738

Open

chhhee10 wants to merge 49 commits into

mainfrom

feat/policy-home-migration

Commits on Aug 25, 2026

Make the guard against disabling failproofai the one policy nobody can disable
chhhee10
committed
3bdaf30
Separate what a policy IS from what it does
chhhee10
committed
d0164ac
Give policies a delivery path that is not the npm package
chhhee10
committed
7a9718c
Let a policy that is not a builtin declare params that actually arrive
chhhee10
committed
f92a6d7
Put a pack on a machine, and refuse the ones that could not work
chhhee10
committed
f3ea30e
Take the pack source a person actually has
chhhee10
committed
c2482de
Prove a pack stops a tool call, not merely that it loads
chhhee10
committed
074fe6f
Stop four handler tests reading whoever-runs-them's real pack directory
chhhee10
committed
6e97c69
Stop a pack's verdict being recorded as nobody's and its crash as ours
chhhee10
committed
43f505f
Ship the builtins as a pack, and compare it against the compiled ones
chhhee10
committed
ff357a1
Stop `policies --install` deleting the policies it cannot name
chhhee10
committed
bd924c6
File a pack's decision under the pack that made it
chhhee10
committed
641f0e6
Install what a pack recommends, not everything it contains
chhhee10
committed
9859e78
Install the builtins pack from the package, with no network
chhhee10
committed
c40f76f
Refuse when a pack this machine enforces is not running
chhhee10
committed
f844335
Deny for the guards a pack declared but could not import
chhhee10
committed
53a680d
Print every command in one visual language, not six
chhhee10
committed
ebe23e0
List everything that enforces, and stop cutting what must be copied
chhhee10
committed
9e391a9
Make a pack something a stranger can publish, and a machine can trust
chhhee10
committed
b8ea9a9
Get a policy pack from the dashboard, and stop it claiming what does not run
chhhee10
committed
e6589a4
Say 39 built-in policies, because there are 39
chhhee10
committed
64fe57b
Let the audit run the policies from the pack, not from the build
chhhee10
committed
b8d6926
Credit the policy that actually decided, and see it when it changes
chhhee10
committed
3a7bf10
Say what the audit is doing, not a count that was never right
chhhee10
committed
a89b6b1
Stop warning on every tool call about a state three screens already show
chhhee10
committed
55863c2
Name the policies something a person will type
chhhee10
committed
7bd1f19
Let people read a pack before they trust it
chhhee10
committed
69de557
Give the dashboard what the terminal just learned
chhhee10
committed
a25ef98
Enforce from packs, and stop registering the builtins
chhhee10
committed
368c025
Take the builtins off every screen, and out of the pack's name
chhhee10
committed
77be767
Make the tests fail the way CI does, then stop them failing
chhhee10
committed
496cadc
Close six ways enforcement could switch off without anyone noticing
chhhee10
committed
f6fbfed
Make it one noun, one screen, and one command to publish
chhhee10
committed
b4ae049
Stop a long policy name from eating its own description
chhhee10
committed
a888bbd
Cover the unified surface, and refuse before looking at what is installed
chhhee10
committed
8280960
Make the new tests survive a machine that has not run the build
chhhee10
committed
f501ba7
WIP: stop shipping policies in the package — core is fetched
chhhee10
committed
c861207
Finish the fetch migration, and stop telling users to run the wrong command
chhhee10
committed
9992cfa
Open 1.0.2-beta.1, because beta.0 is already on the registry
chhhee10
committed
d9fbc9e
Choose the policies at install time, and ask setup one question at a time
chhhee10
committed
b175653
Draw each prompt frame once, and let the wrapper wrap
chhhee10
committed
72f73aa
Open 1.0.2-beta.2, because beta.1 shipped from the commit before this work
chhhee10
committed
ac7bc2c
Take "none" for an answer when the picker is emptied
chhhee10
committed
e6b3988
Stop the audit cache turning over on a change it cannot see
chhhee10
committed
a4a9f47
Make publishing two commands, and let a pack pick its agents
chhhee10
committed
bfd9147
Make the one command the docs headline actually run, and stop warning about one file
internal-cpu
committed
4724ba8
Ask the one question publish cannot answer, instead of requiring the flags it can
internal-cpu
committed
59e6b39
Read opencode's database instead of launching a process to ask it
internal-cpu
committed
6e73381
Resume a transcript that grew, instead of reading it from byte zero again
internal-cpu
committed
5049abc