v0.2.8 — Bounded Autonomy (risk-tiered approval)
Risk-tiered write approval (Bounded Autonomy). Provably-safe, reversible, low-risk writes auto-apply with a report + undo command; destructive, non-reversible, over-ceiling, sensitive-field, and side-effectful (workflow) writes keep the human gate.
- Tiers AUTO / CONFIRM / FULL_GATE via
classify_write; config inapproval_policy.json(shipped default + global + per-portal, union-merged safety lists):auto_apply_max_records(100),sensitive_properties,sensitive_property_action(confirm|full_gate),never_auto_tools(the 5 workflow writes). - Interactive-only; the durable loop still pauses at every write. Every AUTO write still records an undo snapshot + audit entry.
- Full suite green on Python 3.12 (1143 passed). Passed adversarial code review.
See #20.