feat(plugin-auth, service-settings)!: the access policy is set per organization, with three MFA levels by objectstack-fleet[bot] · Pull Request #31013 · objectstack-ai/objectstack

wip(plugin-auth): per-organization access policy

claude

committed

15ec27e

wip: tests for per-organization access policy

claude

committed

e2e2114

wip: changeset

claude

committed

304afe5

wip: changeset disposition

claude

committed

81c7b0d

wip: fix tests, regen bundles, engine double ledger

claude

committed

ce38793

Merge origin/main into claude/issue-30922-per-org-access-policy

claude

committed

9ad4f02

test(plugin-auth): the account-event audit uses mfaRequirement

claude

committed

6a14995

fix: gate findings — limit by presence, typed security slot, collection-time loads

claude

committed

220f5d4

fix: ru/de/ko access policy copy, self-lock-out refusal type

claude

committed

9f82dfd

test: verify pins and dogfood audit test use the MFA levels

claude

committed

e1edf07

test(verify): pay the harness's dynamic loads at collection

claude

committed

4513cb9

Merge remote-tracking branch 'origin/main' into claude/issue-30922-per-org-access-policy

claude

committed

56fe7fd

feat(plugin-auth): per-organization cap and switch judgement, roaming re-judgement, retired option refused

claude

committed

d302a81

chore(changeset): disclose the refused toggle write, the cap populations and the switch judgement

claude

committed

88cad54

i18n(platform-objects): zh-Hant copy for the retired require_mfa column

claude

committed

c25387c

fix(plugin-auth): the idle/absolute revocation keeps its own reason

claude

committed

27d4828

test(plugin-auth): the switch hook sweeps the target organization's cap

claude

committed

2e1b12c

docs(census): the tenant audit census counts the switch revocation's write

claude

committed

6b87c7c

fix(plugin-auth): type the switch judgement's engine options

claude

committed

b0b494c

Navigation Menu

Repository navigation

feat(plugin-auth, service-settings)!: the access policy is set per organization, with three MFA levels - #31013

feat(plugin-auth, service-settings)!: the access policy is set per organization, with three MFA levels#31013
os-zhuang merged 21 commits into
mainfrom
claude/issue-30922-per-org-access-policy

Commits on Nov 6, 2026

wip(plugin-auth): per-organization access policy

wip: tests for per-organization access policy

wip: changeset

wip: changeset disposition

wip: fix tests, regen bundles, engine double ledger

Merge origin/main into claude/issue-30922-per-org-access-policy

test(plugin-auth): the account-event audit uses mfaRequirement

fix: gate findings — limit by presence, typed security slot, collection-time loads

fix: ru/de/ko access policy copy, self-lock-out refusal type

test: verify pins and dogfood audit test use the MFA levels

test(verify): pay the harness's dynamic loads at collection

Merge remote-tracking branch 'origin/main' into claude/issue-30922-per-org-access-policy

feat(plugin-auth): per-organization cap and switch judgement, roaming re-judgement, retired option refused

chore(changeset): disclose the refused toggle write, the cap populations and the switch judgement

i18n(platform-objects): zh-Hant copy for the retired require_mfa column

fix(plugin-auth): the idle/absolute revocation keeps its own reason

test(plugin-auth): the switch hook sweeps the target organization's cap

docs(census): the tenant audit census counts the switch revocation's write

fix(plugin-auth): type the switch judgement's engine options

Commits on Nov 7, 2026

Merge origin/main into claude/issue-30922-per-org-access-policy

Merge origin/main into claude/issue-30922-per-org-access-policy