- Shipped
- June 27, 2026 at 6:57 AM UTC
- Author
- Kamo
- Commit
- d8b4d5f
EventProjectionPolicy = the GLBA data-minimization allowlist ((eventKind x partyClass/role) -> allowed field-groups + channels); platform-default(null org)+org-override two-row pattern. LoanStreamBinding = **************** (String(36)) get-or-create. Both BaseUuidEntity mutable (no WORM); reuse **************** new StreamAudienceClass(10). 7 tests. 2-agent review FIX_THEN_SHIP (applied): documented the FAIL-CLOSED GLBA contract (no-match/ inactive => deny-all), override-NARROWS-never-widens (platform ∩ override), allowedChannels is a CEILING (∩ TCPA consent, never bypasses), honest NULLs-distinct + null-aware seeder finder + the platform-singleton partial unique index (KI), the '*' wildcard finder, the StreamAudienceClass exhaustive-fallback note, policyVersion intent. (R1/R2 rejected per triage.)