GD alone passes every AIService gate in every org; tenant passes audited

Shipped: November 15, 2026 at 5:48 AM UTC
Author: Kamo
Commit: 724dfa6

Owner GOD RULE 2026-11-14. AiCaller.god is **************** (no window); AiCaller.holds (so SessionHelper.hasRight, the route table, RegistryAuthz, ConfigureAccess and every controller check) passes GD after the caller's own rights. AiPlatformRights: GD holds every platform right in any org without the resolver (AI-session and System User preconditions kept). AiSalesAgentController.can passes GD. New security/GodAccess audits a tenant-org pass: one phi_access_log row per gate per request via the existing PhiAccessRecorder, platform org cached (one read per 10 min), never throws.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing