M10 — Governance & Agent Rights: UAT Results

Run ID: 20260304-060225-kgy Date: 2026-03-04 Verdict: PASS

Checklist

CP-1: SchemaBuilder::community_policy() accepts CommunityPolicy and validates at build() time
CP-2: TidalDb::signal_with_community_policy() enforces write rules, returns PolicyViolation on rejection
CP-3: Retrieve::builder().community() threads CommunityContext, suppresses denied-read signals
CP-4: Schema validation: unknown signal in policy → rejected
CP-5: Schema validation: allow/deny conflict → rejected
CP-6: Schema validation: duplicate policy name → rejected
CP-7: Admin role with empty allow/deny → permits all writes
CP-8: Write with unknown role → TidalError::NotFound
CP-9: Retrieve without community context → all signals included (no regression)
CP-10: All 10 integration tests pass (m10_community_policy)

AB-1: Session with allowed_read_signals: ["view"] reads view OK; like → ReadNotAllowed
AB-2: Session with denied_read_signals: ["hide"] → ReadDenied
AB-3: Session with allowed_user_attributes: ["locale"] reads locale OK; age_range → AttributeReadNotAllowed
AB-4: Empty allowed_profile_overrides → unrestricted (backward compatible)
AB-5: Session with allowed_profile_overrides: ["search", "trending"] → can override to those, not for_you
AB-6: All violations recorded in session audit log with correct AuditKind
AB-7: Empty new fields → identical to pre-M10 AgentPolicy (no regression)
AB-8: Schema rejects policy with non-existent signal in allowed_read_signals
AB-9: Schema rejects policy with same signal in both allow and deny lists
AB-10: signals_rejected and overrides_rejected counters increment correctly
AB-11: read_decay_score (without session) unaffected
AB-12: All 18 PolicyEvaluator unit tests pass

Signed off: UAT PASS — all M10 acceptance criteria verified.