feat(capsule): install-time capability-approval gate — manual capsules inert until approved#1066

Open

joshuajbouw wants to merge 9 commits into

mainfrom

test/install-trust-gaps-995

Commits on Jun 24, 2026

test(install): regression tests confirming install-trust gaps (#995)
joshuajbouw
committed
feat(core): per-principal approvals dir + From<&PrincipalId> + reserve approve verb (#995)
joshuajbouw
committed
feat(capsule): gate manifest capabilities behind install-time operator approval (#995)
joshuajbouw
committed
feat(capsule-install): auto-approve furniture-seeded capsules per principal (#995)
joshuajbouw
committed
feat(kernel): auto-approve admin installs + grandfather migration on load (#995)
joshuajbouw
committed
feat(cli): install-time capability approval prompt + `astrid capsule approve` (#995)
joshuajbouw
committed
docs(changelog): install-time capability approval gate (#995)
joshuajbouw
committed
fix(capsule): clear approval on uninstall, sanitize approve arg, disclose kv (#995)
joshuajbouw
committed

Commits on Jun 25, 2026

fix(capsule): address PR review on the capability-approval gate (#995)
joshuajbouw
committed