Milestones

List view

• W5 — Ship it

  OpenFGA adapter behind AuthzBackend protocol. docker-compose + CI. 30-second demo UI: two personas, ethical wall, live revocation, prompt-injection refusal.

  No due date

  •0/3 issues closed
  0% complete3 open0 closed

• W4 — Eval harness + benchmarks

  Synthetic corpus generator. 10-scenario adversarial suite with naive RAG baseline. Four benchmark tables (overhead, recall vs selectivity, scaling, revocation propagation). make bench reproduces everything.

  No due date

  •1/3 issues closed
  33% complete2 open1 closed

• W3 — Gateway + agent lifecycle

  FastAPI gateway wiring all three gates. Session context as typed doc refs. Gate 3 revalidation before every model call. Hash-chained audit log. Minimal real agent loop.

  No due date

  •1/5 issues closed
  20% complete4 open1 closed

• W2 — Label materialization + retrieval index

  Flatten authorization graph to int[] labels. pgvector HNSW + GIN + LIST partitioning by org. Three filtered-ANN strategies benchmarked head-to-head.

  No due date

  •1/3 issues closed
  33% complete2 open1 closed

• W1 — ReBAC core

  Postgres tuple store, transitive check() with reason paths, information barriers with deny-dominance. Differential tests green across ≥5000 generated graphs before proceeding.

  No due date

  •1/3 issues closed
  33% complete2 open1 closed