rcourtman d8f6b1e508 Bundle pending approvals into the agent resource-context endpoint ...

The substrate's "everything an agent needs in one read" guarantee
covered identity, operator state, findings, and recent actions but
forced a separate /api/approvals call for pending governance
state. AgentResourceContext now carries pendingApprovals as a
lightweight AgentResourceApprovalSummary projection — same
vocabulary as approval.pending SSE events, so the doorbell and
the bundle agree on shape. AgentApprovalsProvider is the parallel
seam to AgentFindingsProvider; the router wires a closure that
resolves approval.GetStore() at request time, scopes via
BelongsToOrg, and filters by CanonicalResourceID so cross-tenant
or cross-resource pending requests don't leak. Empty arrays
preserve the iteration-safe contract the existing sections
already follow.

2026-05-09 22:00:53 +01:00

..

internal

Clear v6 prerelease-to-GA promotion gate

2026-04-20 16:33:03 +01:00

v6

Bundle pending approvals into the agent resource-context endpoint

2026-05-09 22:00:53 +01:00

control_plane.json

Capture Pulse Intelligence product direction

2026-05-06 15:56:45 +01:00

control_plane.schema.json

Map legacy stable releases in control plane

2026-04-11 13:23:07 +01:00