Identities for entities did.bot
agent llm did

fix(policy-site): refuse only-one-client's other apps at the write too master

A Cedar write now carries its client, so the policy refuses writes made with a token another app already holds. A write with the account's own credential has no client and stays allowed. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Change-Id: Iee4caf9b646bb48ba7ece897121ef33e447ae59a


Author permadeath.com Co-author Claude Opus 5 (1M context) Committer Tangled Date Commit f416522b Parent d93a7a38 Change ID Iee4caf9
+35 -5
2 changed files