maaz519 c50a501f32 feat(p9): Capability Broker — governed egress + fail-closed gate + obligations ...

Tasks 9.1+9.2: contracts (CapabilityRequest/Result/Provider, PolicyObligation) +
service CapabilityBroker that fails closed via opa (PolicyDeniedError, nothing sent),
enforces obligations before any provider call (DENY_OUTBOUND/REVIEW → BLOCKED;
MASK/REDACT → mask payload field), then routes to a CapabilityProviderRegistry
(SandboxProvider default; env-gated HttpProvider overrides per channel; unknown
channel fails closed). 5 tests: allow/deny/block/redact/unknown-channel.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-01 19:58:25 +05:30

.github/workflows

ci: import-boundary law + CI workflow (P0 complete)

2026-06-30 21:09:37 +05:30

apps

feat(p8): meeting-studio demo + smoke-calendar; P8 verification green

2026-07-01 18:22:24 +05:30

docs

feat(p9): Capability Broker — governed egress + fail-closed gate + obligations

2026-07-01 19:58:25 +05:30

packages

feat(p9): Capability Broker — governed egress + fail-closed gate + obligations

2026-07-01 19:58:25 +05:30

scripts

feat(p8): /v1/calendar REST + kernel-client methods + @insignia/iios-meeting-web

2026-07-01 18:09:18 +05:30

test

ci: import-boundary law + CI workflow (P0 complete)

2026-06-30 21:09:37 +05:30

.env.example

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

.gitignore

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

docker-compose.yml

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

package.json

feat(contracts): @insignia/iios-contracts — scope, enums, platform ports, CloudEvents, errors

2026-06-30 20:59:34 +05:30

pnpm-lock.yaml

feat(p8): meeting-studio demo + smoke-calendar; P8 verification green

2026-07-01 18:22:24 +05:30

pnpm-workspace.yaml

feat(demo): P2.7 Vite React two-pane realtime demo + dev token endpoint (P2 complete)

2026-07-01 01:36:14 +05:30

tsconfig.base.json

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

vitest.config.ts

feat(sdk): P5.1 @insignia/iios-adapter-sdk — ChannelAdapter contract + HMAC webhook adapter + sandbox + fixtures

2026-07-01 13:37:55 +05:30

S

Description

No description provided

1.6 MiB

Languages

TypeScript 88.8%

JavaScript 10.4%

Dockerfile 0.4%

HTML 0.3%

Shell 0.1%