Repository navigation
docs: policy baseline plan (GPO, Intune, Linux) and visualization prompts - #1502
Conversation
…mpts Adds plan policy-baseline-integration-v1 (D-PBL-0..7) for the console's "Richtlinienverwaltung" panel. It keeps configured, assigned and observed apart (GPO has no central observed state), keeps every encoder read-only, and reads the GPO-to-CSP mapping as published data. Nothing past D-PBL-0 until the operator picks the setting key, the home crate and the Linux source. Adds visualization-prompts-v1: three image-model prompts that show only what has shipped, each backed by a PR, with #1496..#1501 and this plan drawn as research. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg
|
Note Currently processing new changes in this PR. This may take a few minutes, please wait... ⚙️ Run configuration
📒 Files selected for processing (4)
Warning Billing warning: we have not been able to collect payment for this subscription for more than 72 hours. Please update the payment method or pay any pending invoices in Billing to avoid service interruption. Comment |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 81cb896d8d
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg
Plan: devices need a dir-sim population before device-targeted assignment resolves; Intune assignment filters, GPO site links and WMI filters are captured raw and resolve to an explicit unknown until evaluated. Prompts: a membership path is drawn as planned (dir-sim returns flattened transitive sets); Stalwart's dir-sim backend is not yet selectable in config. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg
Summary
Documentation only: two files and their board rows.
policy-baseline-integration-v1(D-PBL-0..7). This plans the "Richtlinienverwaltung" panel from the identity console mockup. The panel shows GPO, Intune and Linux values in one row; nothing in OGAR, lance-graph or Spear reads policy today.Three questions kept apart:
GPO has no central observed state, so a GPO column never shows drift.
Read-only encoders in
ogar-ad(gPLink, groupPolicyContainer, SYSVOLRegistry.pol/GptTmpl.inf) andogar-az(configuration policies, assignments, devices). The input is recorded files; there is no HTTP.The GPO↔CSP mapping is read as published data. A setting with no mapping stays visible under its own key.
Assignment resolves over dir-sim, which already provides subtree and transitive members with their chain.
Gated on D-PBL-0. The operator picks the canonical setting key, the home crate and the Linux source before anything past D-PBL-0 starts.
visualization-prompts-v1. Three prompts for an image model: a capability map, the access-path screen and the architecture. They show only what has shipped, and each shipped item is backed by a PR (#1453, #1458, #1469, #1473, #1485, #1486, #1491). The #1496..#1501 visions and this plan are drawn dashed as research.Checks
plan_dids.pypasses on the new planappend_only_gate.py origin/main: OKsupersession_index.py: no change🤖 Generated with Claude Code
https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg
Generated by Claude Code
Summary by CodeRabbit