WIP: stage all uncommitted work — sprints 46-221, graduation headers, specialist fleet, test steps 909-1988

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Bill
2026-04-22 10:15:48 -06:00
parent 486940cbe4
commit 72ffee68fa
2179 changed files with 82979 additions and 1150 deletions

View File

@@ -0,0 +1,20 @@
# AuthZ Policy Propagation (fs_003)
## Objective
Introduce deny-by-default RBAC policy and propagate through backend auth middleware, endpoint guards, frontend route guards, and admin policy editor.
## Language & Library Constraints
- Primary language: python
- Available libraries: fastapi, pydantic, sqlalchemy
- Prefer explicit use of selected library APIs in task execution contracts.
## Required Artifacts
- server/auth/*.py
- server/routes/*.py
- web/src/guards/*
- web/src/admin/policy/*
- security_test_plan.md
## Acceptance
- Generate deterministic taskitems with strict execution contracts.
- Include selected library and preferred APIs per task where applicable.