Harden gateway command approvals with durable atomic approval store - #41427

Open

miclloyd wants to merge 16 commits into

NousResearch:mainfrom

miclloyd:michael/gateway-approval-hardening

Commits on Jun 7, 2026

test: add approval storage contract tests
miclloyd
committed
5eac3f7
feat: add sqlite-backed gateway approval store
miclloyd
committed
cc71de6
feat: use sqlite store for gateway approval proposals
miclloyd
committed
6bc7cc5
feat: consume gateway approvals by id atomically
miclloyd
committed
ffffa73
feat: require explicit approval id for /approve and /deny (remove FIFO)
miclloyd
committed
f492587
feat: phase 3 stricter-runtime fail-closed guard
miclloyd
committed
af81f9e
feat: enforce high-risk approval prompt (Phase 4)
miclloyd
committed
39bfeff
test: cover approval fail-closed gateway paths (Phase 6/7)
miclloyd
committed
563a67e
docs: document gateway approval lifecycle (Phase 8)
miclloyd
committed
32d39e0
test(wiring): use realistic risk-matching description in proposal-creation
miclloyd
committed
c99d50d
feat: validate pinned policy fields at proposal construction
miclloyd
committed
877ea9a
feat: fail closed when approval store cannot persist proposal
miclloyd
committed
b3b402a
feat: wire SqliteApprovalStore as production approval store (gateway init)
miclloyd
committed
f20dbef
feat: fail closed when gateway store init failed (no silent legacy fallback)
miclloyd
committed
db40cbc
fix(audit): distinguish consume from execution; orphan UX says not-executed
miclloyd
committed
614fa0f

Commits on Jun 8, 2026

fix(sqlite): split schema DDL so index on execution_status creates AFTER ALTER
miclloyd
committed
2c1904d