Gio Della-Libera a30ac3f8d7 Policy: add tool metadata conformance (#80056) ...

* feat(policy): add tool metadata conformance checks

* Add policy trusted tool runtime gate

* Use requireMetadata for tool policy

Make tools.requireMetadata the canonical policy schema for risk, sensitivity, and owner requirements. Update runtime enforcement, doctor findings, evidence parsing, tests, and policy docs to use the new schema.

* fix(policy): persist approval metadata

* fix(policy): refresh approval metadata artifacts

* docs(policy): list all tool finding checks

* fix(policy): parse multiline tool metadata

* test(policy): cover unparseable policy check output

* fix(policy): resolve oc-path api in packaged dist

* fix(policy): clear post-rebase CI failures

* test(policy): clear post-rebase CI failures

* fix(policy): restore watch and align validation

* fix(policy): clear ci gate failures

* Simplify policy tool evidence parsing

2026-05-20 20:47:32 -07:00

..

acp.md

feat(acp): expose session lineage metadata

2026-05-11 18:32:46 +01:00

agent.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

agents.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

approvals.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

backup.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

browser.md

feat(browser): add evaluate timeout CLI option (#83696)

2026-05-18 17:30:33 +00:00

channels.md

fix: add channel status filtering (#80706)

2026-05-11 18:44:54 +01:00

clawbot.md

docs: add Related sections to remaining CLI, gateway API, and help pages

2026-04-23 20:41:35 -07:00

commitments.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

completion.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

config.md

fix(config): add --dry-run support to unset (#81895)

2026-05-16 11:09:42 -07:00

configure.md

fix: harden gateway launchd and configure sections

2026-05-17 03:44:05 +01:00

crestodian.md

Remove codex-cli backend and migrate to Codex runtime

2026-05-14 10:07:18 +01:00

cron.md

fix(cron): use structured denial signals (#84311)

2026-05-20 00:49:49 +00:00

daemon.md

docs(cli): document plugin-aware deep status warnings on gateway/daemon

2026-05-11 07:44:13 +08:00

dashboard.md

fix(dashboard): guide manual token auth fallback

2026-05-04 18:39:25 -05:00

devices.md

fix(auth): align operator bootstrap scopes

2026-05-11 14:14:33 -05:00

directory.md

docs: typography hygiene across 9 pages (cli/channels)

2026-05-06 08:55:00 -07:00

dns.md

docs(cli): fix smart apostrophes in dns and health

2026-05-06 00:23:48 -07:00

docs.md

fix(docs): use lowercase MCP search tool (#82704)

2026-05-16 21:21:58 +01:00

doctor.md

fix(doctor): archive legacy clawd browser profile residue (#83230)

2026-05-17 19:45:03 -07:00

flows.md

docs(cli): expand docs and tasks-flow CLI references with verified options

2026-05-10 22:17:42 +08:00

gateway.md

fix(gateway): expose runtime version in gateway status

2026-05-19 22:09:14 -07:00

health.md

docs(cli): rewrite voicecall and tighten setup/health with code-verified options

2026-05-10 22:41:38 +08:00

hooks.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

index.md

feat(policy): add channel conformance checks (#80407)

2026-05-20 11:50:21 +01:00

infer.md

fix: route image URL describes through MiniMax VLM

2026-05-17 08:45:50 +01:00

logs.md

feat(cli/logs): announce --follow gateway reconnect and add JSON notice parity (#75372)

2026-05-03 17:55:58 +08:00

mcp.md

fix(codex): scope user MCP servers by agent (#82180)

2026-05-15 20:17:16 +01:00

memory.md

Fix memory plugin CLI help dispatch (#83841)

2026-05-18 20:35:55 -05:00

message.md

fix(nextcloud-talk): dispatch react action so agents can send reactions (#70110) (#72348)

2026-05-18 18:54:44 +00:00

migrate.md

docs: clarify Codex home isolation

2026-05-14 06:51:57 +01:00

models.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

node.md

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

nodes.md

refactor: move canvas to plugin surfaces

2026-05-07 09:07:18 +01:00

onboard.md

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

pairing.md

docs: typography hygiene across 9 pages (cli/channels)

2026-05-06 08:55:00 -07:00

path.md

OC Path: restore YAML support (#81436)

2026-05-16 07:52:08 -07:00

plugins.md

docs: add tool plugin authoring guide

2026-05-17 11:45:18 +01:00

policy.md

Policy: add tool metadata conformance (#80056)

2026-05-20 20:47:32 -07:00

proxy.md

Support HTTPS managed proxy CA trust (#79171)

2026-05-17 06:23:30 +01:00

qr.md

[codex] restore QR bootstrap operator handoff (#83684)

2026-05-19 20:59:09 +03:00

reset.md

docs: add Related sections to remaining CLI, gateway API, and help pages

2026-04-23 20:41:35 -07:00

sandbox.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

secrets.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

security.md

Add security audit suppressions (#76949)

2026-05-16 22:57:04 +01:00

sessions.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

setup.md

docs(cli): fix setup.md options table mangled by formatter on pipe char

2026-05-10 22:41:39 +08:00

skills.md

feat(cli): support installing skills to shared global directory via --global (#83705)

2026-05-18 17:22:00 +00:00

status.md

fix: clarify pinned session model status

2026-05-20 15:59:24 +01:00

system.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

tasks.md

fix(tasks): report cron session preserves from locked store

2026-05-09 20:05:07 -04:00

tui.md

docs: rewrite 3 pages with code-verified options and Mintlify funnel

2026-05-10 22:31:10 +08:00

uninstall.md

docs: add Related sections to remaining CLI, gateway API, and help pages

2026-04-23 20:41:35 -07:00

update.md

fix: surface update restart and plugin repair guidance

2026-05-15 07:32:29 +01:00

voicecall.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

webhooks.md

docs: rewrite 3 pages with code-verified options and Mintlify funnel

2026-05-10 22:31:10 +08:00

wiki.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00