You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Changed
Embedded policy engine -- replaced Cerbos PDP sidecar with embedded initguard policy engine. No sidecar container, no network round-trips, sub-millisecond evaluation. INITRUNNER_POLICY_DIR replaces five INITRUNNER_CERBOS_* env vars. initguard is now a core dependency (no authz extra). Policy loading fails fast when configured
PolicyToolset -- renamed CerbosToolset to PolicyToolset. Deny messages now include decision.reason and decision.advice from the policy engine
Removed
docker-compose.cerbos.yml -- no sidecar needed
authz optional extra -- initguard ships with core install
All INITRUNNER_CERBOS_* environment variables
Fixed
Dashboard test collection failures when fastapi extra not installed
Desktop test (test_worker_failure) mock triggering fastapi import