28.0.0 (2026-08-30)
⚠ BREAKING CHANGES
- pi-permission-system:
PermissionDecisionResolutiongainsauthorizer_allowedandauthorizer_denied, and existing decisions change which resolution they report. An ask decided by a registeredauthorizerChainlink now reportsauthorizer_allowed/authorizer_deniedinstead ofuser_approved/user_denied, and a subagent's ask answered by its parent reports what decided inside that parent —policy_allow/policy_denyfor a rule,authorizer_*for a link — instead of attributing it to the user. Consumers switching exhaustively overresolutionmust handle the two new values; a consumer countinguser_deniedas human interactions now gets the accurate count rather than one inflated by machine decisions.
Features
- pi-permission-system: broadcast the decider that actually resolved a permission ask (1b92386), closes #772