Hackpert: expose typed action admission inspection #93

Closed

nsaspy wants to merge 2 commits from hackmode-rage-hackpert/27-action-admission-inspection into master

nsaspy commented

2026-09-04 20:37:07 +00:00

Owner

Issue #27 bounded Hackpert-owned inspection slice.

RED: 4970d9710d2a51e05bf6eb7404fd0a6a341ed415 — exact-head core failed because the admission-inspection API did not exist; monorepo and agent-framework-boundary passed.

GREEN implementation head: d42c2b57986a24c56d914209794c5cc82426cfc7 — core, monorepo, and agent-framework-boundary all passed on the draft PR.

The surface distinguishes accepted vs rejected active-action admission without executing providers or mutating canonical state. Rejections are typed as authority denial or invalid action/scope, expose only bounded effect/reason metadata, and reuse the existing payload-redacted action inspection so raw provider input and graph/KB contents do not leak.

No database internals, second scheduler, raw Tek9 access, provider executor, or StarIntel product work.

This non-draft PR reuses the identical green head because GitHub's ready-for-review GraphQL mutation failed on the connector's fullDatabaseId field bug.

Issue #27 bounded Hackpert-owned inspection slice. RED: `4970d9710d2a51e05bf6eb7404fd0a6a341ed415` — exact-head core failed because the admission-inspection API did not exist; monorepo and agent-framework-boundary passed. GREEN implementation head: `d42c2b57986a24c56d914209794c5cc82426cfc7` — core, monorepo, and agent-framework-boundary all passed on the draft PR. The surface distinguishes accepted vs rejected active-action admission without executing providers or mutating canonical state. Rejections are typed as authority denial or invalid action/scope, expose only bounded effect/reason metadata, and reuse the existing payload-redacted action inspection so raw provider input and graph/KB contents do not leak. No database internals, second scheduler, raw Tek9 access, provider executor, or StarIntel product work. This non-draft PR reuses the identical green head because GitHub's ready-for-review GraphQL mutation failed on the connector's `fullDatabaseId` field bug.

nsaspy added 2 commits

2026-09-04 20:37:07 +00:00