@cat-factory/app 0.267.0 → 0.268.0

package/app/utils/riskPolicyDraft.ts

@@ -0,0 +1,203 @@
+import type { StepGating } from '@cat-factory/contracts'
+import type {
+  ClassRulesByRole,
+  DryRunRoles,
+  MergeClassRules,
+  RequirementConcernLevel,
+  RiskPolicy,
+  SubmissionClassesByRole,
+  UpdateRiskPolicyInput,
+} from '~/types/merge'
+import type { RiskPolicyAxis } from '~/utils/riskPolicy'
+
+/**
+ * The editable form state behind one risk policy, and the conversions either side of it.
+ *
+ * Extracted out of the settings panel because the SAME form now serves two tiers (a board's own
+ * policies and an account's, ADR 0055) plus the create row, and three copies of "percentages are
+ * edited 0..100 and stored 0..1" is three chances for one of them to drift by a factor of a hundred.
+ */
+export interface RiskPolicyDraft {
+  name: string
+  maxComplexity: number
+  maxRisk: number
+  maxImpact: number
+  ciMaxAttempts: number
+  maxRequirementIterations: number
+  maxRequirementConcernAllowed: RequirementConcernLevel
+  autoMergeEnabled: boolean
+  /**
+   * Whether a run under this policy answers the parks its own automatic loops raise when they give
+   * up, rather than stopping for a person. Edited as a switch because the vocabulary is two-valued
+   * and the OFF state is the historical behaviour.
+   */
+  unattended: boolean
+  /**
+   * The confidence floor an unattended run's auto-answered requirements finding must clear, as a
+   * PERCENT (like the numbers above). Only read while `unattended` is on.
+   */
+  minAutoAnswerConfidence: number
+  /**
+   * Per-change-class auto-merge rules. An OMITTED class means "use the score ceilings above", so
+   * `{}` is the identity.
+   */
+  classRules: MergeClassRules
+  /**
+   * The ROLE layer over those rules: per-role narrowing (narrow-only, so `{}` is the identity) and
+   * the roles whose runs are sandboxed. Both replace the stored value wholesale on save, which is
+   * why clearing one in the editor is a plain omission.
+   */
+  classRulesByRole: ClassRulesByRole
+  dryRunRoles: DryRunRoles
+  /**
+   * Which classes each role may LAND at all. A role with no entry is unrestricted, so `{}` is the
+   * identity; an entry with no classes is the different policy that the role lands nothing.
+   */
+  submissionClassesByRole: SubmissionClassesByRole
+  /** Implementation-fork decision gating (edited 0..100, stored 0..1); disabled ⇒ off in `auto`. */
+  forkEnabled: boolean
+  forkMinComplexity: number
+  forkMinRisk: number
+  forkMinImpact: number
+  forkOnMissing: 'run' | 'skip'
+}
+
+/**
+ * Which draft field carries each axis's fork FLOOR: the same three axes as the auto-merge ceilings,
+ * read as "how big an estimate has to be before the coder stops to propose implementations". Shares
+ * the axis order but not the fields, and is exhaustive over the union so adding an axis fails the
+ * typecheck rather than silently rendering two.
+ */
+export const FORK_FLOOR_FIELD: Record<
+  RiskPolicyAxis,
+  'forkMinRisk' | 'forkMinImpact' | 'forkMinComplexity'
+> = {
+  risk: 'forkMinRisk',
+  impact: 'forkMinImpact',
+  complexity: 'forkMinComplexity',
+}
+
+/** A stored policy → the form state, percentages scaled up for editing. */
+export function toRiskPolicyDraft(p: RiskPolicy): RiskPolicyDraft {
+  return {
+    name: p.name,
+    maxComplexity: Math.round(p.maxComplexity * 100),
+    maxRisk: Math.round(p.maxRisk * 100),
+    maxImpact: Math.round(p.maxImpact * 100),
+    ciMaxAttempts: p.ciMaxAttempts,
+    maxRequirementIterations: p.maxRequirementIterations,
+    maxRequirementConcernAllowed: p.maxRequirementConcernAllowed,
+    autoMergeEnabled: p.autoMergeEnabled,
+    unattended: p.autonomy === 'unattended',
+    minAutoAnswerConfidence: Math.round(p.minAutoAnswerConfidence * 100),
+    classRules: { ...p.classRules },
+    classRulesByRole: { ...p.classRulesByRole },
+    dryRunRoles: [...p.dryRunRoles],
+    submissionClassesByRole: { ...p.submissionClassesByRole },
+    forkEnabled: p.forkDecision?.enabled ?? false,
+    forkMinComplexity: Math.round((p.forkDecision?.minComplexity ?? 0.5) * 100),
+    forkMinRisk: Math.round((p.forkDecision?.minRisk ?? 0.4) * 100),
+    forkMinImpact: Math.round((p.forkDecision?.minImpact ?? 0.4) * 100),
+    forkOnMissing: p.forkDecision?.onMissingEstimate ?? 'run',
+  }
+}
+
+/** The blank draft a create form opens on: the shipped defaults, and never a granted licence. */
+export function blankRiskPolicyDraft(): RiskPolicyDraft {
+  return {
+    name: '',
+    maxComplexity: 50,
+    maxRisk: 40,
+    maxImpact: 50,
+    ciMaxAttempts: 10,
+    maxRequirementIterations: 6,
+    maxRequirementConcernAllowed: 'none',
+    autoMergeEnabled: true,
+    // A new policy parks on its own caps, matching every built-in but the unattended default: a
+    // licence to answer them is a posture somebody grants, never one a blank form assumes.
+    unattended: false,
+    minAutoAnswerConfidence: 80,
+    // The create row authors the numbers only. Class and role rules start at their identity and are
+    // edited on the saved policy, where each rule can be shown beside the base rule (and the track
+    // record) it narrows — neither reads as anything on a policy that does not exist yet.
+    classRules: {},
+    classRulesByRole: {},
+    dryRunRoles: [],
+    submissionClassesByRole: {},
+    forkEnabled: false,
+    forkMinComplexity: 50,
+    forkMinRisk: 40,
+    forkMinImpact: 40,
+    forkOnMissing: 'run',
+  }
+}
+
+/** The `StepGating` payload for the fork-decision gate from a draft. */
+export function forkGatingFromDraft(d: RiskPolicyDraft): StepGating {
+  return {
+    enabled: d.forkEnabled,
+    minComplexity: d.forkMinComplexity / 100,
+    minRisk: d.forkMinRisk / 100,
+    minImpact: d.forkMinImpact / 100,
+    onMissingEstimate: d.forkOnMissing,
+  }
+}
+
+/**
+ * The form state → the PATCH body, percentages scaled back down.
+ *
+ * Every role/class map is submitted whole on every save, which is what makes clearing one entry a
+ * plain omission (there is no "delete this key" wire shape). `fallbackName` keeps a blanked name
+ * field from saving an empty string over a policy that has one.
+ */
+export function riskPolicyPatchFromDraft(
+  d: RiskPolicyDraft,
+  fallbackName: string,
+): UpdateRiskPolicyInput {
+  return {
+    name: d.name.trim() || fallbackName,
+    maxComplexity: d.maxComplexity / 100,
+    maxRisk: d.maxRisk / 100,
+    maxImpact: d.maxImpact / 100,
+    ciMaxAttempts: d.ciMaxAttempts,
+    maxRequirementIterations: d.maxRequirementIterations,
+    maxRequirementConcernAllowed: d.maxRequirementConcernAllowed,
+    autoMergeEnabled: d.autoMergeEnabled,
+    autonomy: d.unattended ? 'unattended' : 'attended',
+    minAutoAnswerConfidence: d.minAutoAnswerConfidence / 100,
+    classRules: d.classRules,
+    classRulesByRole: d.classRulesByRole,
+    dryRunRoles: d.dryRunRoles,
+    submissionClassesByRole: d.submissionClassesByRole,
+    forkDecision: forkGatingFromDraft(d),
+  }
+}
+
+/** Per-axis label keys for the auto-merge CEILINGS, iterated in the shared axis order. */
+export const CEILING_LABEL_KEYS: Record<RiskPolicyAxis, string> = {
+  risk: 'settings.riskPolicy.field.maxRisk',
+  impact: 'settings.riskPolicy.field.maxImpact',
+  complexity: 'settings.riskPolicy.field.maxComplexity',
+}
+
+/** Per-axis label keys for the fork-decision FLOORS. */
+export const FORK_FLOOR_LABEL_KEYS: Record<RiskPolicyAxis, string> = {
+  risk: 'settings.riskPolicy.forkDecision.minRisk',
+  impact: 'settings.riskPolicy.forkDecision.minImpact',
+  complexity: 'settings.riskPolicy.forkDecision.minComplexity',
+}
+
+/**
+ * Per-concern-level label keys for the requirements auto-pass threshold (none < low < medium <
+ * high). An exhaustive `Record` keyed off the union, each value a LITERAL catalog key so the
+ * typed-message-keys check sees it.
+ */
+export const CONCERN_LABEL_KEYS: Record<RequirementConcernLevel, string> = {
+  none: 'settings.riskPolicy.concern.none',
+  low: 'settings.riskPolicy.concern.low',
+  medium: 'settings.riskPolicy.concern.medium',
+  high: 'settings.riskPolicy.concern.high',
+}
+
+/** The concern levels in severity order, for the select. */
+export const CONCERN_LEVELS: readonly RequirementConcernLevel[] = ['none', 'low', 'medium', 'high']

package/i18n/locales/de.json

@@ -116,7 +116,8 @@
         "team": "Team & Zugriff",
         "fragments": "Kontextfragmente",
         "skills": "Skills",
-        "foundational": "Basisdienste"
+        "foundational": "Basisdienste",
+        "riskPolicies": "Risikorichtlinien"
       }
     },
     "infrastructure": {
@@ -559,7 +560,11 @@
         "created": "Richtlinie erstellt",
         "createFailed": "Richtlinie konnte nicht erstellt werden",
         "defaultFailed": "Standard konnte nicht festgelegt werden",
-        "deleteFailed": "Richtlinie konnte nicht gelöscht werden"
+        "deleteFailed": "Richtlinie konnte nicht gelöscht werden",
+        "cloned": "Richtlinie in dieses Board geklont",
+        "cloneFailed": "Richtlinie konnte nicht geklont werden",
+        "hideFailed": "Richtlinie konnte nicht ausgeblendet werden",
+        "unhideFailed": "Richtlinie konnte nicht wiederhergestellt werden"
       },
       "forkDecision": {
         "label": "Implementierungs-Weichenentscheidung",
@@ -615,6 +620,32 @@
       "autoAnswer": {
         "label": "Mindestzuversicht für Auto-Antworten (%)",
         "hint": "Wie sicher der Requirement Writer sein muss, damit ein unbeobachteter Lauf seinen Vorschlag übernimmt statt auf eine Person zu warten. Infrage kommen nur Befunde, die der Reviewer ohne Product Owner für beantwortbar hielt."
+      },
+      "tier": {
+        "account": "Vom Konto",
+        "accountHint": "Für das gesamte Konto definiert. Jedes Board erbt sie; nur eine Kontoadministration kann sie ändern."
+      },
+      "own": {
+        "heading": "Richtlinien dieses Boards"
+      },
+      "inherited": {
+        "heading": "Vom Konto geerbt",
+        "hint": "Für alle Boards dieses Kontos gültig. Klone eine Richtlinie, um hier eine Kopie zu bearbeiten, oder blende sie aus, damit keine Aufgabe dieses Boards sie wählen kann.",
+        "clone": "Ins Board klonen",
+        "cloneHint": "Diese Richtlinie ins Board kopieren, wo du ihre Grenzwerte bearbeiten kannst.",
+        "copyName": "{name} (Kopie)",
+        "hide": "Ausblenden",
+        "hideHint": "Diese Richtlinie auf diesem Board nicht mehr anbieten. Du kannst sie später wiederherstellen."
+      },
+      "hidden": {
+        "heading": "Ausgeblendete Kontorichtlinien",
+        "restore": "Wiederherstellen",
+        "withdrawn": "Vom Konto nicht mehr definiert",
+        "loadFailed": "Diese Liste konnte nicht geladen werden, daher kann eine Richtlinie ausgeblendet sein, ohne hier zu erscheinen."
+      },
+      "confirmHide": {
+        "title": "Diese Richtlinie ausblenden?",
+        "body": "„{name}“ wird auf diesem Board nicht mehr angeboten; Aufgaben mit dieser Auswahl fallen auf die Board-Standardrichtlinie zurück. Du kannst sie später wiederherstellen."
       }
     },
     "observabilityConnection": {
@@ -2847,6 +2878,12 @@
         "load": "Das Prüfprotokoll konnte nicht geladen werden.",
         "loadMore": "Ältere Einträge konnten nicht geladen werden"
       }
+    },
+    "accountRiskPolicies": {
+      "intro": "Merge-Haltungen für alle Boards dieses Kontos. Jedes Board erbt sie schreibgeschützt und kann eine klonen, um eine Kopie zu bearbeiten, oder sie ausblenden. Welche Richtlinie eine Aufgabe ohne Auswahl regelt, wird pro Board festgelegt.",
+      "empty": "Noch keine kontoweiten Risikorichtlinien. Boards nutzen ihre eigenen Bibliotheken, bis du eine hinzufügst.",
+      "loadFailed": "Kontorichtlinien konnten nicht geladen werden",
+      "confirmDelete": "„{name}“ wird von allen Boards dieses Kontos zurückgezogen. Aufgaben mit dieser Auswahl fallen auf den Standard ihres Boards zurück."
     }
   },
   "board": {
@@ -5780,7 +5817,9 @@
         "document_already_linked": "Dokument bereits angehängt",
         "dry_run_not_mergeable": "Probelauf kann nicht zusammengeführt werden",
         "submission_not_allowed": "Zusammenführen für diesen Lauf nicht erlaubt",
-        "webhook_limit_reached": "Webhook-Limit erreicht"
+        "webhook_limit_reached": "Webhook-Limit erreicht",
+        "risk_policy_inherited": "Diese Richtlinie gehört zum Konto",
+        "risk_policy_not_inherited": "Diese Richtlinie gehört zu diesem Board"
       },
       "description": {
         "dependencies_unmet": "Diese Aufgabe hängt von anderen ab, die noch nicht abgeschlossen sind. Schließe sie ab oder gib sie frei und starte dann erneut.",
@@ -5819,7 +5858,9 @@
         "document_already_linked": "Dieses Dokument ist an eine andere Aufgabe angehängt. Lösen Sie es dort zuerst, oder hängen Sie eine separate Kopie an.",
         "dry_run_not_mergeable": "Dieser Pull Request stammt aus einem Probelauf und kann hier nicht zusammengeführt werden. Starte die Aufgabe erneut als echten Lauf, um einen Pull Request zu erzeugen, den dieser Arbeitsbereich zusammenführt.",
         "submission_not_allowed": "Die Merge-Richtlinie dieser Aufgabe erlaubt der Rolle, die diesen Lauf gestartet hat, diese Änderungsart nicht zusammenzuführen. Jemand mit einer passenden Rolle kann es tun, oder ein Admin erweitert die Richtlinie in der Merge-Vorlage.",
-        "webhook_limit_reached": "Für diesen Workspace ist bereits die maximale Anzahl ausgehender Webhooks registriert. Entfernen Sie einen nicht mehr benötigten und registrieren Sie diesen erneut."
+        "webhook_limit_reached": "Für diesen Workspace ist bereits die maximale Anzahl ausgehender Webhooks registriert. Entfernen Sie einen nicht mehr benötigten und registrieren Sie diesen erneut.",
+        "risk_policy_inherited": "Sie gilt für alle Boards des Kontos und kann daher nicht von hier geändert werden. Klone sie in dieses Board und bearbeite die Kopie.",
+        "risk_policy_not_inherited": "Sie ist bereits die eigene Richtlinie dieses Boards: bearbeite sie direkt oder lösche sie, wenn sie nicht mehr angeboten werden soll."
       },
       "action": {
         "connectGitHub": "GitHub verbinden",

package/i18n/locales/en.json

@@ -664,7 +664,9 @@
         "document_already_linked": "Document already attached",
         "dry_run_not_mergeable": "Dry run cannot be merged",
         "submission_not_allowed": "Merge not allowed for this run",
-        "webhook_limit_reached": "Webhook limit reached"
+        "webhook_limit_reached": "Webhook limit reached",
+        "risk_policy_inherited": "This policy belongs to the account",
+        "risk_policy_not_inherited": "This policy belongs to this board"
       },
       "description": {
         "dependencies_unmet": "This task depends on others that aren't finished yet. Complete or unblock them, then start it again.",
@@ -706,7 +708,9 @@
         "document_already_linked": "That document is attached to another task. Detach it there first, or attach a separate copy.",
         "dry_run_not_mergeable": "This pull request came from a dry run, so it can't be merged from here. Start the task again as a live run to produce a pull request this workspace will merge.",
         "submission_not_allowed": "This task's merge policy doesn't let the role that started this run merge this kind of change. Somebody whose role may merge it can do so, or an admin can widen the policy in the merge preset.",
-        "webhook_limit_reached": "This workspace already has the maximum number of outbound webhooks registered. Remove one you no longer need, then register this again."
+        "webhook_limit_reached": "This workspace already has the maximum number of outbound webhooks registered. Remove one you no longer need, then register this again.",
+        "risk_policy_inherited": "It is shared with every board in the account, so it cannot be changed from here. Clone it to this board and edit the copy.",
+        "risk_policy_not_inherited": "It is already this board's own policy: edit it directly, or delete it if you no longer want it offered."
       },
       "action": {
         "connectGitHub": "Connect GitHub",
@@ -2721,6 +2725,12 @@
         "load": "The audit log could not be loaded.",
         "loadMore": "Could not load older entries"
       }
+    },
+    "accountRiskPolicies": {
+      "intro": "Merge postures shared by every board in this account. Each board inherits these read-only, and can clone one to edit a copy or hide it. Which policy governs a task that picked none is set per board.",
+      "empty": "No account-wide risk policies yet. Boards run on their own libraries until you add one.",
+      "loadFailed": "Could not load account risk policies",
+      "confirmDelete": "\"{name}\" will be withdrawn from every board in this account. Tasks that picked it fall back to their board's default."
     }
   },
   "mcpAuthorize": {
@@ -2840,7 +2850,8 @@
         "team": "Team & access",
         "fragments": "Context fragments",
         "skills": "Skills",
-        "foundational": "Foundational services"
+        "foundational": "Foundational services",
+        "riskPolicies": "Risk policies"
       }
     },
     "infrastructure": {
@@ -3286,7 +3297,11 @@
         "created": "Policy created",
         "createFailed": "Could not create policy",
         "defaultFailed": "Could not set default",
-        "deleteFailed": "Could not delete policy"
+        "deleteFailed": "Could not delete policy",
+        "cloned": "Policy cloned to this board",
+        "cloneFailed": "Could not clone policy",
+        "hideFailed": "Could not hide policy",
+        "unhideFailed": "Could not restore policy"
       },
       "forkDecision": {
         "label": "Implementation-fork decision",
@@ -3351,6 +3366,32 @@
       "autoAnswer": {
         "label": "Auto-answer confidence floor (%)",
         "hint": "How sure the Requirement Writer must be for an unwatched run to keep its suggested answer instead of stopping for a person. Only findings the reviewer judged answerable without a product owner are eligible."
+      },
+      "tier": {
+        "account": "From the account",
+        "accountHint": "Defined for the whole account. Every board inherits it; only an account admin can change it."
+      },
+      "own": {
+        "heading": "This board's policies"
+      },
+      "inherited": {
+        "heading": "Inherited from the account",
+        "hint": "Shared with every board in this account. Clone one to edit a copy here, or hide it so no task on this board can pick it.",
+        "clone": "Clone to board",
+        "cloneHint": "Copy this policy into the board, where you can edit its limits.",
+        "copyName": "{name} (copy)",
+        "hide": "Hide",
+        "hideHint": "Stop offering this policy on this board. You can restore it later."
+      },
+      "hidden": {
+        "heading": "Hidden account policies",
+        "restore": "Restore",
+        "withdrawn": "No longer defined by the account",
+        "loadFailed": "This list could not be loaded, so a policy may be hidden without appearing here."
+      },
+      "confirmHide": {
+        "title": "Hide this policy?",
+        "body": "\"{name}\" will not be offered on this board, and tasks that picked it fall back to the board default. You can restore it later."
       }
     },
     "observabilityConnection": {

package/i18n/locales/es.json

@@ -595,7 +595,9 @@
         "document_already_linked": "El documento ya está adjunto",
         "dry_run_not_mergeable": "Una ejecución de prueba no se puede fusionar",
         "submission_not_allowed": "Fusión no permitida para esta ejecución",
-        "webhook_limit_reached": "Límite de webhooks alcanzado"
+        "webhook_limit_reached": "Límite de webhooks alcanzado",
+        "risk_policy_inherited": "Esta política pertenece a la cuenta",
+        "risk_policy_not_inherited": "Esta política pertenece a este tablero"
       },
       "description": {
         "dependencies_unmet": "Esta tarea depende de otras que aún no están terminadas. Complétalas o desbloquéalas y vuelve a iniciarla.",
@@ -634,7 +636,9 @@
         "document_already_linked": "Ese documento está adjunto a otra tarea. Sepáralo allí primero o adjunta una copia aparte.",
         "dry_run_not_mergeable": "Esta pull request proviene de una ejecución de prueba, así que no se puede fusionar desde aquí. Vuelve a iniciar la tarea como ejecución real para producir una pull request que este espacio de trabajo sí fusionará.",
         "submission_not_allowed": "La política de fusión de esta tarea no permite que el rol que inició la ejecución fusione este tipo de cambio. Alguien cuyo rol sí lo permita puede hacerlo, o un administrador puede ampliar la política en el preajuste de fusión.",
-        "webhook_limit_reached": "Este espacio de trabajo ya tiene registrado el número máximo de webhooks salientes. Elimina uno que ya no necesites y vuelve a registrar este."
+        "webhook_limit_reached": "Este espacio de trabajo ya tiene registrado el número máximo de webhooks salientes. Elimina uno que ya no necesites y vuelve a registrar este.",
+        "risk_policy_inherited": "Se comparte con todos los tableros de la cuenta, así que no puede cambiarse desde aquí. Clónala en este tablero y edita la copia.",
+        "risk_policy_not_inherited": "Ya es la política propia de este tablero: edítala directamente o elimínala si no quieres que se ofrezca."
       },
       "action": {
         "connectGitHub": "Conectar GitHub",
@@ -2596,6 +2600,12 @@
         "load": "No se pudo cargar el registro de auditoría.",
         "loadMore": "No se pudieron cargar las entradas anteriores"
       }
+    },
+    "accountRiskPolicies": {
+      "intro": "Posturas de fusión compartidas por todos los tableros de esta cuenta. Cada tablero las hereda en modo de solo lectura y puede clonar una para editar una copia u ocultarla. Qué política rige una tarea que no eligió ninguna se define por tablero.",
+      "empty": "Aún no hay políticas de riesgo de cuenta. Los tableros usan sus propias bibliotecas hasta que añadas una.",
+      "loadFailed": "No se pudieron cargar las políticas de riesgo de la cuenta",
+      "confirmDelete": "«{name}» se retirará de todos los tableros de esta cuenta. Las tareas que la eligieron pasarán a la predeterminada de su tablero."
     }
   },
   "mcpAuthorize": {
@@ -2715,7 +2725,8 @@
         "team": "Equipo y acceso",
         "fragments": "Fragmentos de contexto",
         "skills": "Habilidades",
-        "foundational": "Servicios fundamentales"
+        "foundational": "Servicios fundamentales",
+        "riskPolicies": "Políticas de riesgo"
       }
     },
     "providerConnection": {
@@ -3010,7 +3021,11 @@
         "created": "Política creada",
         "createFailed": "No se pudo crear la política",
         "defaultFailed": "No se pudo establecer el predeterminado",
-        "deleteFailed": "No se pudo eliminar la política"
+        "deleteFailed": "No se pudo eliminar la política",
+        "cloned": "Política clonada en este tablero",
+        "cloneFailed": "No se pudo clonar la política",
+        "hideFailed": "No se pudo ocultar la política",
+        "unhideFailed": "No se pudo restaurar la política"
       },
       "autoMergeOnHint": "Fusionar automáticamente cuando esté dentro de los límites de la política.",
       "autoMergeOffHint": "Enviar siempre el PR a revisión humana.",
@@ -3072,6 +3087,32 @@
       "autoAnswer": {
         "label": "Confianza mínima para autorrespuesta (%)",
         "hint": "Cuánta seguridad debe tener el Requirement Writer para que una ejecución sin observadores conserve su respuesta sugerida en lugar de detenerse. Solo son elegibles los hallazgos que el revisor juzgó resolubles sin un product owner."
+      },
+      "tier": {
+        "account": "De la cuenta",
+        "accountHint": "Definida para toda la cuenta. Todos los tableros la heredan; solo una administración de cuenta puede cambiarla."
+      },
+      "own": {
+        "heading": "Políticas de este tablero"
+      },
+      "inherited": {
+        "heading": "Heredadas de la cuenta",
+        "hint": "Compartidas con todos los tableros de esta cuenta. Clona una para editar una copia aquí, u ocúltala para que ninguna tarea de este tablero pueda elegirla.",
+        "clone": "Clonar al tablero",
+        "cloneHint": "Copiar esta política al tablero, donde puedes editar sus límites.",
+        "copyName": "{name} (copia)",
+        "hide": "Ocultar",
+        "hideHint": "Dejar de ofrecer esta política en este tablero. Puedes restaurarla más adelante."
+      },
+      "hidden": {
+        "heading": "Políticas de cuenta ocultas",
+        "restore": "Restaurar",
+        "withdrawn": "La cuenta ya no la define",
+        "loadFailed": "No se pudo cargar esta lista, así que puede haber una política oculta que no aparezca aquí."
+      },
+      "confirmHide": {
+        "title": "¿Ocultar esta política?",
+        "body": "«{name}» no se ofrecerá en este tablero y las tareas que la eligieron pasarán a la política predeterminada del tablero. Puedes restaurarla más adelante."
       }
     },
     "observabilityConnection": {

package/i18n/locales/fr.json

@@ -595,7 +595,9 @@
         "document_already_linked": "Document déjà joint",
         "dry_run_not_mergeable": "Une exécution à blanc ne peut pas être fusionnée",
         "submission_not_allowed": "Fusion non autorisée pour cette exécution",
-        "webhook_limit_reached": "Limite de webhooks atteinte"
+        "webhook_limit_reached": "Limite de webhooks atteinte",
+        "risk_policy_inherited": "Cette politique appartient au compte",
+        "risk_policy_not_inherited": "Cette politique appartient à ce tableau"
       },
       "description": {
         "dependencies_unmet": "Cette tâche dépend d'autres qui ne sont pas encore terminées. Terminez-les ou débloquez-les, puis relancez-la.",
@@ -634,7 +636,9 @@
         "document_already_linked": "Ce document est joint à une autre tâche. Détachez-le d'abord, ou joignez-en une copie distincte.",
         "dry_run_not_mergeable": "Cette pull request provient d'une exécution à blanc et ne peut pas être fusionnée ici. Relancez la tâche en exécution réelle pour produire une pull request que cet espace de travail fusionnera.",
         "submission_not_allowed": "La politique de fusion de cette tâche n'autorise pas le rôle qui a lancé cette exécution à fusionner ce type de changement. Un coéquipier dont le rôle le permet peut le faire, ou un admin peut élargir la politique dans le préréglage de fusion.",
-        "webhook_limit_reached": "Cet espace de travail a déjà enregistré le nombre maximal de webhooks sortants. Supprimez-en un dont vous n’avez plus besoin, puis enregistrez celui-ci à nouveau."
+        "webhook_limit_reached": "Cet espace de travail a déjà enregistré le nombre maximal de webhooks sortants. Supprimez-en un dont vous n’avez plus besoin, puis enregistrez celui-ci à nouveau.",
+        "risk_policy_inherited": "Elle est partagée par tous les tableaux du compte et ne peut donc pas être modifiée ici. Clonez-la vers ce tableau et modifiez la copie.",
+        "risk_policy_not_inherited": "C'est déjà la politique propre à ce tableau : modifiez-la directement, ou supprimez-la si vous ne voulez plus qu'elle soit proposée."
       },
       "action": {
         "connectGitHub": "Connecter GitHub",
@@ -2596,6 +2600,12 @@
         "load": "Le journal d’audit n’a pas pu être chargé.",
         "loadMore": "Impossible de charger les entrées plus anciennes"
       }
+    },
+    "accountRiskPolicies": {
+      "intro": "Postures de fusion partagées par tous les tableaux de ce compte. Chaque tableau en hérite en lecture seule et peut en cloner une pour modifier une copie, ou la masquer. La politique qui régit une tâche sans choix se définit par tableau.",
+      "empty": "Aucune politique de risque du compte pour l'instant. Les tableaux utilisent leurs propres bibliothèques jusqu'à ce que vous en ajoutiez une.",
+      "loadFailed": "Impossible de charger les politiques de risque du compte",
+      "confirmDelete": "« {name} » sera retirée de tous les tableaux de ce compte. Les tâches qui l'avaient choisie repasseront à la politique par défaut de leur tableau."
     }
   },
   "mcpAuthorize": {
@@ -2715,7 +2725,8 @@
         "team": "Équipe et accès",
         "fragments": "Fragments de contexte",
         "skills": "Compétences",
-        "foundational": "Services fondamentaux"
+        "foundational": "Services fondamentaux",
+        "riskPolicies": "Politiques de risque"
       }
     },
     "providerConnection": {
@@ -3010,7 +3021,11 @@
         "created": "Politique créée",
         "createFailed": "Impossible de créer la politique",
         "defaultFailed": "Impossible de définir par défaut",
-        "deleteFailed": "Impossible de supprimer la politique"
+        "deleteFailed": "Impossible de supprimer la politique",
+        "cloned": "Politique clonée vers ce tableau",
+        "cloneFailed": "Impossible de cloner la politique",
+        "hideFailed": "Impossible de masquer la politique",
+        "unhideFailed": "Impossible de rétablir la politique"
       },
       "autoMergeOnHint": "Fusionner automatiquement si dans les limites de la politique.",
       "autoMergeOffHint": "Toujours envoyer la PR en revue humaine.",
@@ -3072,6 +3087,32 @@
       "autoAnswer": {
         "label": "Confiance minimale pour une réponse automatique (%)",
         "hint": "Le degré de certitude que le Requirement Writer doit atteindre pour qu'un run sans surveillance conserve sa réponse suggérée au lieu de s'arrêter. Seuls les constats jugés traitables sans product owner sont éligibles."
+      },
+      "tier": {
+        "account": "Du compte",
+        "accountHint": "Définie pour tout le compte. Chaque tableau en hérite ; seule une administration du compte peut la modifier."
+      },
+      "own": {
+        "heading": "Politiques de ce tableau"
+      },
+      "inherited": {
+        "heading": "Héritées du compte",
+        "hint": "Partagées par tous les tableaux de ce compte. Clonez-en une pour en modifier une copie ici, ou masquez-la afin qu'aucune tâche de ce tableau ne puisse la choisir.",
+        "clone": "Cloner vers le tableau",
+        "cloneHint": "Copier cette politique dans le tableau, où vous pourrez modifier ses limites.",
+        "copyName": "{name} (copie)",
+        "hide": "Masquer",
+        "hideHint": "Ne plus proposer cette politique sur ce tableau. Vous pourrez la rétablir plus tard."
+      },
+      "hidden": {
+        "heading": "Politiques du compte masquées",
+        "restore": "Rétablir",
+        "withdrawn": "Plus définie par le compte",
+        "loadFailed": "Cette liste n'a pas pu être chargée : une politique peut donc être masquée sans figurer ici."
+      },
+      "confirmHide": {
+        "title": "Masquer cette politique ?",
+        "body": "« {name} » ne sera plus proposée sur ce tableau et les tâches qui l'avaient choisie repasseront à la politique par défaut du tableau. Vous pourrez la rétablir plus tard."
       }
     },
     "observabilityConnection": {