Load grant files, failing closed on any invalid file

crates/brokerd/src/grants.rs reads grants/*.toml into a GrantSet: load reports every problem in every file and returns either a complete valid set or the full problem list, never a partial one; from_grants sorts by id and collects every rule-2..9 problem; render prints each problem then the runbook pointer. All 17 grants tests pass; make gate prints gate: ok.

Implemented-By: OpenCode session (model recorded in docs/implementer-log.md)

This commit is contained in:

kyle

2026-09-19 02:50:26 -07:00

parent 9150effc8e

commit e2ab29aa15

19 changed files with 1003 additions and 0 deletions

									
										crates/brokerd/tests/fixtures/grants/valid/no-fetch-internal.toml
									
Vendored

		+6
		
												View File
												
				@@ -0,0 +1,6 @@

				tool = "http_fetch"

				mode = "deny"

				max_taint = "secret"

				[constraints]

				hosts = ["internal.example.com"]