mirror of
https://github.com/block/buzz.git
synced 2026-10-31 14:31:02 +00:00
The editable permission-policy control belonged on the instance-edit surface, but that surface is being retired and a definition-scoped default is the correct home for an authority grant that describes how a persona should behave. Add the definition default as resolver tier 2 (instance override → definition → global → built-in `ask`), live-resolved through the same total `resolve_effective_permission_policy` signature every spawn, summary, and deploy path already carries — never mint-copied, so a definition-default change moves every linked instance on the next summary. It is written through `apply_persona_behavior` as part of the behavior group and is local-only: never published to the catalog and never mint-copied, unlike `respond_to`/`parallelism`. The instance surface (`AgentPermissionPolicyField`) becomes display-only: it shows the resolved effective value, its source, and the per-instance applied-vs-desired drift row, which stays instance-scoped because only a deployed instance has a byte-stamped deploy receipt. Co-authored-by: Will Pfleger <pfleger.will@gmail.com> Signed-off-by: Will Pfleger <pfleger.will@gmail.com>