[seonghobae]

Partial implementation of #10, stacked on PR #90.

Dependency / live alignment

Current live prerequisite is feat/sensitive-model-disclosure-necessity at 7d0d96e2f501ab5e9c76553f8c2b611bfdea64cd. Current #119 head is ba16263f58e8c21df909e881b390cc094baa6642.

This head merges the current prerequisite without rewriting history. Fresh comparison reports ahead 14 / behind 0, with merge base exactly the live prerequisite. The delta remains limited to six #119-owned paths: CHANGELOG.md, crates/originweave-policy/src/break_glass.rs, crates/originweave-policy/src/lib.rs, crates/originweave-policy/tests/sensitive_break_glass.rs, crates/originweave-policy/tests/sensitive_break_glass_governance.rs, and crates/originweave-policy/tests/sensitive_break_glass_identifier_bounds.rs.

Keep Draft while #90 and its prerequisite sensitive-data/model-policy stack remain active. No prerequisite check, review, status, coverage, mergeability, or synthetic-merge evidence transfers.

Implemented contract

The evaluator preserves the ordinary sensitive-data decision and admits this exceptional path only from approval-requiring ordinary decisions. It binds exact authority, reason metadata, actor identity, a bounded validity interval, required approval evidence, monitoring metadata, and post-event review metadata, with typed fail-closed results for malformed or mismatched inputs.

Current-head verification

On exact head ba16263f58e8c21df909e881b390cc094baa6642 against exact live prerequisite 7d0d96e2f501ab5e9c76553f8c2b611bfdea64cd:

• cargo fmt --all -- --check: success;
• cargo test --locked --workspace --all-features: success;
• cargo clippy --locked --workspace --all-targets --all-features -- -D warnings: success;
• RUSTDOCFLAGS='-D warnings' cargo doc --locked --workspace --all-features --no-deps: success;
• ancestry: ahead 14 / behind 0, merge base exactly the live prerequisite;
• GitHub reports this Draft mergeable;
• formal reviews currently returned: none; and
• exact-head CI: pending.

The prior successful run 32039905498 belongs to the previous head and is historical only. Security/SAST/central review workflows absent for this stacked Draft are absent, not passing. No predecessor-head, prerequisite-head, queued, pending, skipped, cancelled, stale, synthetic, status-only, or model-only evidence is promoted as current proof.

Truth boundary

This is deterministic policy metadata only. Runtime actor authentication, trusted clock provenance, durable persistence, monitoring execution, post-event review execution, audit evidence, and protected-value handling remain responsibilities of separately trusted execution components. This PR does not complete issue #10.

Passing automation is not independent approval. This scheduled actor does not merge, self-approve, alter workflows, add secrets, weaken checks, tag, or publish.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 4bd5bbd0-3ce0-46fb-a733-ecd308fb31a2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}