Peter Steinberger 7b000dba9d feat(reef): operator-configurable sharing rules for the guard (#131167) ...

* feat(reef): operator-configurable sharing rules for the guard

Adds channels.reef.guard.rules with capped outbound/inbound free-text
policy. Rules ride the trusted instruction side of the guard call only,
may tighten decisions or explicitly allow otherwise-review cases, and can
never override the deny floor or deterministic checks. The rules text is
hashed into the effective policy version so audit rows and pending review
approvals bind to the exact policy in force.

* fix(reef): full rules digest in policy identity; align blank-rule validation

ClawSweeper review fixes: use the untruncated sha256 rules digest in the
effective policy version so approvalDigest stays collision-resistant, and
express identical non-blank (\S) rule validation in the zod schema, the
manifest JSON Schemas, and the generated channel metadata instead of a
trim-transform mismatch.

2026-08-27 14:37:17 -07:00

..

audit-receipts.test.ts

fix(reef): omit absent receipt categories from audit state (#110177)

2026-07-17 22:24:33 +01:00

audit.ts

…

canonical.ts

…

checks-friendcode-ulid.test.ts

…

checks.ts

…

encoding.ts

…

envelope.ts

…

friendcode.ts

…

guard-adapters.ts

feat(reef): operator-configurable sharing rules for the guard (#131167)

2026-08-27 14:37:17 -07:00

guard.test.ts

feat(reef): operator-configurable sharing rules for the guard (#131167)

2026-08-27 14:37:17 -07:00

guard.ts

feat(reef): operator-configurable sharing rules for the guard (#131167)

2026-08-27 14:37:17 -07:00

identity-envelope.test.ts

…

identity.ts

…

index.ts

…

pipeline.test.ts

test(reef): consolidate transport protocol fixtures (#118281)

2026-08-02 16:39:26 -07:00

pipeline.ts

…

receipts.ts

fix(reef): omit absent receipt categories from audit state (#110177)

2026-07-17 22:24:33 +01:00

replay.ts

…

ulid.ts

…