[WIP] Enforce platform database access at the GraphQL boundary - #1784

Draft

yyyyaaa wants to merge 10 commits into

mainfrom

feat/platform-billing-access-fence

Commits on Aug 31, 2026

feat(graphql): add database access policy gate
yyyyaaa
committed
84c55cc
fix(graphql): gate databases before tenant hydration
yyyyaaa
committed
d83f12f
fix(graphql): bind private schemas to database policy identity
yyyyaaa
committed
32189c4
fix(graphql): map configured execution errors to HTTP
yyyyaaa
committed
e6dd000
fix(graphql): harden database access policy boundary
yyyyaaa
committed
b20261e
fix(graphql): pin internal identity trust to server surface
yyyyaaa
committed
3d7c82b
fix(graphql): enforce access policy contract
yyyyaaa
committed
3a741fa
fix(graphql): rebind warm scoped routes
yyyyaaa
committed
597f6f5
fix(graphql): flush scoped route identities
yyyyaaa
committed
1192516
fix(graphql): flush wildcard route identities
yyyyaaa
committed
b1b6cb2