- Ya
- 3 Julai 2026, 03:21 UTC
- Mwandishi
- Kamo
- Ahadi ya
- f79dfb1
One controller/client pair fronting MLOSGovernanceService's five reads (both its steward-feedback and pull-through-policy modules share /api/governance). organizationId resolved from the OTK session, never the browser. Tenant guards: org-injected passthrough for the two by-org reads; flat top-level-org fail-closed (404) for the single active-policy read; per-row post-filter for the by-decision feedback trail + policy version history (drop foreign rows, re-count), with a downstream-404 normalized to an empty 200 so unknown/foreign/empty are indistinguishable (no cross-org AiDecision existence oracle). Adds mlos.governance.url.