feat(expr): ADR-0058 P1–P4 — canonical CEL→FilterCondition compiler, RLS/sharing cutover, check enforcement, conformance ledger - #2090

Merged

xuyushun441-sys merged 7 commits into

mainfrom

feat/expression-pushdown-compiler

Jun 21, 2026

Commits on Jun 21, 2026

feat(formula): ADR-0058 P1 — canonical CEL→FilterCondition pushdown compiler
os-zhuang
and
claude
committed
da11f13
refactor(security,sharing): ADR-0058 P2 — cut RLS + sharing over to the one compiler
os-zhuang
and
claude
committed
8a9e90e
feat(sharing): ADR-0058 D3 — close #1887, compound sharing conditions enforced e2e
os-zhuang
and
claude
committed
74801d7
feat(security): ADR-0058 D4 — enforce the RLS `check` clause on writes
os-zhuang
and
claude
committed
c7fa215
test(dogfood): ADR-0058 D7 — Expression Surface Conformance ledger + CI ratchet
os-zhuang
and
claude
committed
901b903
chore(changeset): ADR-0058 expression compiler (closes #1887)
os-zhuang
and
claude
committed
626c445
fix(expr): resolve 2 CodeQL alerts in the ADR-0058 changes
os-zhuang
and
claude
committed
70de896