fix(platform): wire chat guardrails and policies and harden the turn - #3230

Merged

larryro merged 28 commits into

mainfrom

fix/chat-guardrails-policy-wiring

Sep 6, 2026

Commits on Sep 5, 2026

refactor(platform): drop dead governance, chat-error and thread exports
larryro
committed
7bbbb5d
refactor(platform): remove the chat host's dead store and sandbox arms
larryro
committed
6d48f32
fix(platform): enforce the guardrail and system-prompt policies on chat turns
larryro
committed
78e6e6b
fix(platform): refuse a chat send on a credential fault before any row lands
larryro
committed
3dc5dbd
fix(platform): run the corpus leg for a rag_search mail-attachment narrow
larryro
committed
6de9e4e
fix(platform): answer every tool call a stopped or failed reply left open
larryro
committed
24c31bd
fix(platform): scope MCP get_knowledge to the key holder's visibility
larryro
committed
3e6a496
fix(platform): walk the usage ledger newest-first under the scan cap
larryro
committed
14b1b4f
docs(platform): document TALE_EXTERNAL_TURN_DEADLINE_MS
larryro
committed
1b38e37
fix(platform): abort the thread-title model call when its race is lost
larryro
committed
86faac8
fix(platform): write a policy file inside its audit transaction
larryro
committed
78f19b8
fix(platform): retire the run_code, agent_jobs and model_sync policies
larryro
committed
ecdb816
refactor(platform): narrow the capability surface to deployed automations
larryro
committed
81b13d6
chore(platform): drop the chat lib's exports nobody imports
larryro
committed
0bc47bc
test(platform): judge the guardrail proof lanes on what they seed
larryro
committed
5b2d4c1
fix(platform): tell the composer when a refusal is on the record
larryro
committed
ce827fe
fix(platform): derive every policy-type reader from POLICY_TYPES
larryro
committed
217f4f9
chore(platform): drop the docs-demo run-code policy fixture
larryro
committed
1c8bc5a
fix(platform): hold back the output guardrail's tail across segments
larryro
committed
c31af98
fix(platform): stamp output guardrail events as the assistant's
larryro
committed
6d0e015
fix(platform): keep a moderation misconfiguration off the breaker
larryro
committed
b2bb997
Merge origin/main into fix/chat-guardrails-policy-wiring
larryro
committed
4866791
fix(platform): run the host policy over the moderation endpoint
larryro
committed
2b78287
test(platform): read the title write off the typed mutation mock
larryro
committed
17b4397
refactor(platform): read the vision-model pin via the governance shim
larryro
committed
58aeab4
refactor(platform): read the task-agent policy pin via the governance shim
larryro
committed
29cee2d
test(platform): name the sync error the automation-run tool lane hides
larryro
committed
860d2ca

Commits on Sep 6, 2026

Merge origin/main into fix/chat-guardrails-policy-wiring
larryro
committed
68f74bb

Navigation Menu

Uh oh!

fix(platform): wire chat guardrails and policies and harden the turn - #3230

fix(platform): wire chat guardrails and policies and harden the turn#3230
larryro merged 28 commits into
mainfrom
fix/chat-guardrails-policy-wiring

Commits on Sep 5, 2026

refactor(platform): drop dead governance, chat-error and thread exports

refactor(platform): remove the chat host's dead store and sandbox arms

fix(platform): enforce the guardrail and system-prompt policies on chat turns

fix(platform): refuse a chat send on a credential fault before any row lands

fix(platform): run the corpus leg for a rag_search mail-attachment narrow

fix(platform): answer every tool call a stopped or failed reply left open

fix(platform): scope MCP get_knowledge to the key holder's visibility

fix(platform): walk the usage ledger newest-first under the scan cap

docs(platform): document TALE_EXTERNAL_TURN_DEADLINE_MS

fix(platform): abort the thread-title model call when its race is lost

fix(platform): write a policy file inside its audit transaction

fix(platform): retire the run_code, agent_jobs and model_sync policies

refactor(platform): narrow the capability surface to deployed automations

chore(platform): drop the chat lib's exports nobody imports

test(platform): judge the guardrail proof lanes on what they seed

fix(platform): tell the composer when a refusal is on the record

fix(platform): derive every policy-type reader from POLICY_TYPES

chore(platform): drop the docs-demo run-code policy fixture

fix(platform): hold back the output guardrail's tail across segments

fix(platform): stamp output guardrail events as the assistant's

fix(platform): keep a moderation misconfiguration off the breaker

Merge origin/main into fix/chat-guardrails-policy-wiring

fix(platform): run the host policy over the moderation endpoint

test(platform): read the title write off the typed mutation mock

refactor(platform): read the vision-model pin via the governance shim

refactor(platform): read the task-agent policy pin via the governance shim

test(platform): name the sync error the automation-run tool lane hides

Commits on Sep 6, 2026

Merge origin/main into fix/chat-guardrails-policy-wiring