Shiju a72351d370 fix(policy)!: require explicit L7 append targets and scope (#3380) ...

Make allow and deny appends identify a rule and endpoint and declare every
affected binary and port. Reject incomplete, stale, ambiguous, and provider
targets atomically so a small append cannot silently change a broader scope.

Update CLI previews, wire requests, Go types and generated bindings, SDK
regressions, operator documentation, and live policy-update coverage.

BREAKING CHANGE: AddAllowRules and AddDenyRules require L7RuleTarget instead
of host and port. CLI appends require a rule name and explicit binary scope.

Signed-off-by: Shiju <shiju@nvidia.com>

2026-09-17 22:53:07 +00:00

..

src

fix(policy)!: require explicit L7 append targets and scope (#3380)

2026-09-17 22:53:07 +00:00

testdata

feat(policy): preserve exact MCP revision allowlists (#3027)

2026-09-05 04:24:49 +00:00

Cargo.toml

feat(policy): establish one canonical authored policy representation (#3334)

2026-09-16 17:36:31 +00:00