Skip to content

docs: policy baseline plan (GPO, Intune, Linux) and visualization prompts - #1502

Merged
AdaWorldAPI merged 4 commits into
mainfrom
ccr-0455e606-wmtsor
Oct 12, 2026
Merged

AdaWorldAPI merged 4 commits into
mainfrom
ccr-0455e606-wmtsor

Conversation

@AdaWorldAPI

@AdaWorldAPI AdaWorldAPI commented Oct 12, 2026 •

Copy link
Copy Markdown
Owner

Summary

Documentation only: two files and their board rows.

policy-baseline-integration-v1 (D-PBL-0..7). This plans the "Richtlinienverwaltung" panel from the identity console mockup. The panel shows GPO, Intune and Linux values in one row; nothing in OGAR, lance-graph or Spear reads policy today.

  • Three questions kept apart:

    • configured: what the policy object says;
    • assigned: links, filters and group assignments;
    • observed: per-device state.

    GPO has no central observed state, so a GPO column never shows drift.

  • Read-only encoders in ogar-ad (gPLink, groupPolicyContainer, SYSVOL Registry.pol / GptTmpl.inf) and ogar-az (configuration policies, assignments, devices). The input is recorded files; there is no HTTP.

  • The GPO↔CSP mapping is read as published data. A setting with no mapping stays visible under its own key.

  • Assignment resolves over dir-sim, which already provides subtree and transitive members with their chain.

  • Gated on D-PBL-0. The operator picks the canonical setting key, the home crate and the Linux source before anything past D-PBL-0 starts.

visualization-prompts-v1. Three prompts for an image model: a capability map, the access-path screen and the architecture. They show only what has shipped, and each shipped item is backed by a PR (#1453, #1458, #1469, #1473, #1485, #1486, #1491). The #1496..#1501 visions and this plan are drawn dashed as research.

Checks

  • plan_dids.py passes on the new plan
  • append_only_gate.py origin/main: OK
  • supersession_index.py: no change

🤖 Generated with Claude Code

https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg


Generated by Claude Code

Summary by CodeRabbit

  • Documentation
    • Added a proposal and status tracking for read-only policy-baseline reporting across Intune, Group Policy, and a potential Linux source. The proposal distinguishes configured, assigned, and observed policy states, and notes where data may be unavailable or unmapped.
    • Added visualization guidance that separates existing capabilities from research proposals, with German-language prompts for capability, access-path, and architecture diagrams.

…mpts

Adds plan policy-baseline-integration-v1 (D-PBL-0..7) for the console's
"Richtlinienverwaltung" panel. It keeps configured, assigned and observed
apart (GPO has no central observed state), keeps every encoder read-only,
and reads the GPO-to-CSP mapping as published data. Nothing past D-PBL-0
until the operator picks the setting key, the home crate and the Linux
source.

Adds visualization-prompts-v1: three image-model prompts that show only
what has shipped, each backed by a PR, with #1496..#1501 and this plan
drawn as research.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg
@AdaWorldAPI
AdaWorldAPI marked this pull request as ready for review October 12, 2026 15:00
@coderabbitai

coderabbitai Bot commented Oct 12, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Essentials
  • Run ID: ca12850f-2b36-456b-8068-f0bb9bb77290

📥 Commits

Reviewing files that changed from the base of the PR and between 349e63a and 81cb896.


📒 Files selected for processing (4)
  • .claude/board/INTEGRATION_PLANS.md
  • .claude/board/STATUS_BOARD.md
  • .claude/knowledge/visualization-prompts-v1.md
  • .claude/plans/policy-baseline-integration-v1.md

 ________________________________________________________
< Rust's borrow checker and I are on a first-name basis. >
 --------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

Billing warning: we have not been able to collect payment for this subscription for more than 72 hours. Please update the payment method or pay any pending invoices in Billing to avoid service interruption.


Comment @coderabbitai help to get the list of available commands.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 12, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-12T15:05:39.953501Z 81cb896 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 81cb896d8d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .claude/knowledge/visualization-prompts-v1.md Outdated
Comment thread .claude/knowledge/visualization-prompts-v1.md Outdated
Comment thread .claude/plans/policy-baseline-integration-v1.md Outdated
Comment thread .claude/plans/policy-baseline-integration-v1.md
Comment thread .claude/plans/policy-baseline-integration-v1.md
Comment thread .claude/plans/policy-baseline-integration-v1.md Outdated
Plan: devices need a dir-sim population before device-targeted assignment
resolves; Intune assignment filters, GPO site links and WMI filters are
captured raw and resolve to an explicit unknown until evaluated.
Prompts: a membership path is drawn as planned (dir-sim returns flattened
transitive sets); Stalwart's dir-sim backend is not yet selectable in config.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg
@AdaWorldAPI
AdaWorldAPI merged commit 4040958 into main Oct 12, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants