preflight: engine-role privilege checks with typed GRANT-naming refusals - #31

Merged

Kiran01bm merged 6 commits into

mainfrom

kiran01bm/e7-privilege-preflight

Aug 14, 2026

Commits on Aug 12, 2026

preflight: verify the engine-role contract before any change
Kiran01bm
committed
8c084a8

Commits on Aug 13, 2026

Merge remote-tracking branch 'origin/main' into kiran01bm/e7-privilege-preflight
Kiran01bm
committed
d1f1bf7
preflight: address privilege-check review findings
Kiran01bm
committed
bfb44a6
Merge main; check privileges at the routed tier
Kiran01bm
committed
fee66f3
Derive privilege tier from index-building ops, not statement kind
Kiran01bm
committed
4f22702
Export tier derivation as preflight.RequiredTier
Kiran01bm
committed
c7013a4