Bryan Frimin 98a8d90391 Relocate agent-run authorization to its package ...

The agent-run actions and policies lived in the core probo policy set,
which forced every authorization change for the agent-run domain to
touch unrelated core files. Move the actions and the OWNER/ADMIN and
VIEWER/AUDITOR policies into the agentrun package and have it expose a
PolicySet that probod registers into the authorizer at composition
time, so the rules live alongside the domain logic they govern.

Signed-off-by: Bryan Frimin <bryan@probo.com>

2026-06-08 15:27:56 +02:00

1003 B

Raw Blame History

View Raw