fix(api): read org policy views from subgraphs by jonathanhaaswriter · Pull Request #152 · writer/cerebro

jonathanhaaswriter · 2026-03-24T21:12:36Z

Summary

route per-policy org-policy reads through bounded subgraphs instead of full tenant graph materialization
prefer the live tenant graph when available and fall back to store-native ExtractSubgraph reads otherwise
add regressions for both store-only and live-graph execution paths

jonathanhaaswriter · 2026-03-26T18:06:00Z

Re-reviewed the current diff and I don't have any additional actionable findings right now.

Test added 5 commits March 25, 2026 08:25

fix(api): read org policy views from subgraphs

2657461

test(ci): appease staticcheck nil guards

a6f3cc5

test(ci): appease threat runtime nil guards

07a409a

test(ci): add explicit nil-guard returns

0b20bfb

test(ci): stabilize dual-write lease expiry timing

cd0d901

jonathanhaaswriter force-pushed the feat/org-policy-store-subgraph branch from 3e7599c to cd0d901 Compare March 25, 2026 15:34

test(ci): fix remaining staticcheck nil guards in runtime threat tests

3a4d90a