Skip to content

feat: add risk-aware shadow admission policy - #183

Merged
ezutfen merged 3 commits into
mainfrom
feat/158-risk-aware-admission-policy
Sep 6, 2026
Merged

feat: add risk-aware shadow admission policy#183
ezutfen merged 3 commits into
mainfrom
feat/158-risk-aware-admission-policy

Conversation

@ezutfen

@ezutfen ezutfen commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

Closes #158

Summary

  • add a versioned, digest-verified risk_aware_shadow_v1 policy artifact and pure V2 evaluator
  • add shared API and CLI simulations that compare the authoritative path_a_compat result with the shadow profile
  • persist optional V2 shadow history without updating current admission state or production behavior
  • preserve existing V1 history and RLS boundaries

Verification

  • make check
  • make compose-ci — 3,738 passed, 34 skipped

The simulator is read-only by default. Shadow persistence requires explicit operator authorization.

@ezutfen
ezutfen merged commit 6b941d8 into main Sep 6, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ENG-PROMOTION-003C — Replace the universal 72-hour gate with versioned risk-based admission profiles

1 participant