feat: Cedar HITL approval gates for agent tool use#88

Open

scoropeza wants to merge 37 commits into

aws-samples:mainfrom

scoropeza:feature/cedar-hitl-engine

Commits on May 7, 2026

docs(cedar-hitl): restore and revise HITL gates design, fold adversarial findings
scoropeza
committed
feat(cedar-hitl): pin Cedar engines and seed cross-engine parity contract
scoropeza
committed
feat(cedar-hitl): three-outcome PolicyEngine core
scoropeza
committed
feat(cedar-hitl): approval milestone writers + engine counters
scoropeza
committed
feat(cedar-hitl): TaskApprovals + AWAITING_APPROVAL transition primitives
scoropeza
committed
feat(cedar-hitl): PreToolUse three-outcome REQUIRE_APPROVAL path
scoropeza
committed
feat(cedar-hitl): TaskApprovalsTable + SlackUserMapping + status enum
scoropeza
committed
feat(cedar-hitl): Cedar-wasm layer + wire approval tables into agent stack
scoropeza
committed
feat(cedar-hitl): approve + deny handlers + shared types (§7.1, §7.2)
scoropeza
committed
feat(cedar-hitl): get-pending + get-policies + link-slack-user handlers
scoropeza
committed
feat(cedar-hitl): wire Chunk 5 routes + orchestrator + reconciler + agent plumbing
scoropeza
committed
feat(cedar-hitl): Chunk 6 CLI — approve / deny / pending / policies
scoropeza
committed
feat(cedar-hitl): Chunk 7a — persist gate counter + IMPL-23 cache observability
scoropeza
committed
feat(cedar-hitl): Chunk 7b — persist approval_gate_cap from blueprint
scoropeza
committed

Commits on May 8, 2026

Commits on May 11, 2026

fix(cedar-hitl): E2E deploy-readiness — policies bundle + onboarding gate + CLI error visibility
scoropeza
committed

Commits on May 12, 2026

Commits on May 13, 2026

Commits on May 14, 2026

chore(cedar-hitl): merge upstream/main — fanout/SlackNotify refactor + resource tagging
scoropeza
committed

Commits on May 15, 2026

Commits on May 16, 2026