datatug / datatug-core / 41876887866

100%

push

github

feat(meaninglabels): Meaning Graph sensitivity labels, engine-free (#452)

Adds `pkg/meaninglabels`, the Meaning Graph sensitivity vocabulary specified in datatug/backstage `spec/features/meaning-sensitivity` (PR datatug/backstage#169).

- Model: closed classes `secret` / `financial` / `pii` (+ owner `none`), kinds per class, column and table targets, `datatug-labels/v1` document with a content-digest revision.
- `Apply`: owner set / confirm / dismiss / clear / class policy; agent `propose` only (tighten-only); audit `Event` with a loosening flag; `ExactTarget` and `Loosening` for the edge.
- `Effective`: an exact owner column label decides; otherwise stricter-wins of the table label, proposals and the read-time suggestion minus exact dismissals; class policies apply last. Also `Reviewed`/`MaskAllUnreviewed` for views and `Tighten` for the control-plane merge.
- `Rules`/`SuggestColumn`: a deterministic token rule table (names and types only).
- `Plan`: masked columns, wire `Protection`, `CheckReferenced` (`FIELD_PROTECTED`), `CheckReveal`, `RawRefusal`.
- `DALgoStore`: compare-and-set over any `dal.DB` (`meaningLabels/labels` under the project key). Engine-free: imports no driver module; tests use `dalgo2memory`.

Coverage: 100% statements for the package.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Source commits:

- a7217c2416aa feat(meaninglabels): Meaning Graph sensitivity labels, engine-free
  New package pkg/meaninglabels (backstage spec features/meaning-sensitivity):
  closed classes secret/financial/pii (+ owner none) that are Perimeter
  protection classes; owner labels on columns and tables, agent proposals
  that only tighten, read-time name/type suggestions with dismissals;
  effective-label precedence with exact matching for loosening entries;
  tighten-only merge; masking plan, FIELD_PROTECTED, reveal and raw checks;
  compare-and-set store over any dal.DB. 100% statement coverage.
- 429618aa6665 fix(meaninglabels): ... (continued)

582 of 582 new or added lines in 6 files covered. (100.0%)

39606 of 39606 relevant lines covered (100.0%)

1.0 hits per line