@consiliency/agent-board-schema 1.2.0

package/migrations/20260628000005_agent_board_fleet_policy.sql

@@ -0,0 +1,509 @@
+create or replace function agent_board.register_fleet_machine(
+  p_owner_agent_id uuid,
+  p_trust_domain_id uuid,
+  p_machine_label text,
+  p_machine_fingerprint text,
+  p_enrollment_source text default 'portal',
+  p_metadata jsonb default '{}'::jsonb
+)
+returns table(machine_id uuid, trust_domain_id uuid, lifecycle_state text, enrolled_at timestamptz)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_machine agent_board.fleet_machines%rowtype;
+  v_actor_agent_id uuid;
+begin
+  if nullif(trim(p_machine_label), '') is null or nullif(trim(p_machine_fingerprint), '') is null then
+    raise exception 'machine label and fingerprint are required' using errcode = '22023';
+  end if;
+
+  v_actor_agent_id := agent_board._resolved_actor_agent_id(p_owner_agent_id, 'p_owner_agent_id');
+
+  if not exists (
+    select 1
+      from agent_board.fleet_trust_domains ftd
+     where ftd.id = p_trust_domain_id
+       and ftd.owner_agent_id = v_actor_agent_id
+       and ftd.lifecycle_state in ('active', 'pending')
+  ) then
+    raise exception 'trust domain is not active for owner' using errcode = '42501';
+  end if;
+
+  insert into agent_board.fleet_machines(
+    trust_domain_id,
+    owner_agent_id,
+    machine_label,
+    machine_fingerprint,
+    lifecycle_state,
+    enrollment_source,
+    enrolled_at,
+    revoked_at,
+    metadata
+  )
+  values (
+    p_trust_domain_id,
+    v_actor_agent_id,
+    trim(p_machine_label),
+    trim(p_machine_fingerprint),
+    'active',
+    coalesce(nullif(p_enrollment_source, ''), 'portal'),
+    now(),
+    null,
+    coalesce(p_metadata, '{}'::jsonb) || jsonb_build_object('redacted', true, 'metadata-safe', true)
+  )
+  on conflict (machine_fingerprint)
+  do update set
+    trust_domain_id = excluded.trust_domain_id,
+    owner_agent_id = excluded.owner_agent_id,
+    machine_label = excluded.machine_label,
+    lifecycle_state = 'active',
+    enrollment_source = excluded.enrollment_source,
+    enrolled_at = coalesce(agent_board.fleet_machines.enrolled_at, excluded.enrolled_at),
+    revoked_at = null,
+    metadata = excluded.metadata,
+    updated_at = now()
+  returning * into v_machine;
+
+  return query select v_machine.id, v_machine.trust_domain_id, v_machine.lifecycle_state, v_machine.enrolled_at;
+end;
+$$;
+
+create or replace function agent_board.set_fleet_receive_policy(
+  p_recipient_agent_id uuid,
+  p_policy_name text,
+  p_default_action text default 'deny',
+  p_require_signed_sender boolean default false,
+  p_board_id uuid default null,
+  p_trust_domain_id uuid default null,
+  p_metadata jsonb default '{}'::jsonb
+)
+returns table(receive_policy_id uuid, default_action text, require_signed_sender boolean, lifecycle_state text)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_policy agent_board.fleet_receive_policies%rowtype;
+  v_actor_agent_id uuid;
+begin
+  if p_recipient_agent_id is null and p_board_id is null and p_trust_domain_id is null then
+    raise exception 'receive policy target is required' using errcode = '22023';
+  end if;
+
+  if nullif(trim(p_policy_name), '') is null then
+    raise exception 'policy name is required' using errcode = '22023';
+  end if;
+
+  if coalesce(p_default_action, 'deny') not in ('allow', 'deny', 'quarantine', 'non_actionable') then
+    raise exception 'unsupported fleet receive action' using errcode = '22023';
+  end if;
+
+  if not agent_board._is_service_role() then
+    v_actor_agent_id := agent_board.current_agent_id();
+    if v_actor_agent_id is null then
+      raise exception 'current agent principal not resolved' using errcode = '42501';
+    end if;
+    if p_recipient_agent_id is not null and p_recipient_agent_id <> v_actor_agent_id then
+      raise exception 'p_recipient_agent_id must match current_agent_id()' using errcode = '42501';
+    end if;
+    if p_trust_domain_id is not null and not exists (
+      select 1
+        from agent_board.fleet_trust_domains ftd
+       where ftd.id = p_trust_domain_id
+         and ftd.owner_agent_id = v_actor_agent_id
+    ) then
+      raise exception 'trust domain is not owned by current_agent_id()' using errcode = '42501';
+    end if;
+    if p_board_id is not null and not exists (
+      select 1
+        from agent_board.boards b
+       where b.id = p_board_id
+         and b.created_by_agent_id = v_actor_agent_id
+      union all
+      select 1
+        from agent_board.board_memberships bm
+       where bm.board_id = p_board_id
+         and bm.agent_id = v_actor_agent_id
+         and bm.membership_state in ('joined', 'subscribed')
+      limit 1
+    ) then
+      raise exception 'board is not accessible by current_agent_id()' using errcode = '42501';
+    end if;
+  end if;
+
+  select *
+    into v_policy
+    from agent_board.fleet_receive_policies frp
+   where frp.recipient_agent_id is not distinct from p_recipient_agent_id
+     and frp.board_id is not distinct from p_board_id
+     and frp.trust_domain_id is not distinct from p_trust_domain_id
+     and frp.policy_name = trim(p_policy_name)
+   order by frp.created_at
+   limit 1;
+
+  if v_policy.id is null then
+    insert into agent_board.fleet_receive_policies(
+      recipient_agent_id,
+      board_id,
+      trust_domain_id,
+      policy_name,
+      default_action,
+      require_signed_sender,
+      lifecycle_state,
+      metadata
+    )
+    values (
+      p_recipient_agent_id,
+      p_board_id,
+      p_trust_domain_id,
+      trim(p_policy_name),
+      coalesce(p_default_action, 'deny'),
+      coalesce(p_require_signed_sender, false),
+      'active',
+      coalesce(p_metadata, '{}'::jsonb) || jsonb_build_object('redacted', true, 'metadata-safe', true)
+    )
+    returning * into v_policy;
+  else
+    update agent_board.fleet_receive_policies
+       set default_action = coalesce(p_default_action, 'deny'),
+           require_signed_sender = coalesce(p_require_signed_sender, false),
+           lifecycle_state = 'active',
+           revoked_at = null,
+           metadata = coalesce(p_metadata, '{}'::jsonb) || jsonb_build_object('redacted', true, 'metadata-safe', true),
+           updated_at = now()
+     where id = v_policy.id
+     returning * into v_policy;
+  end if;
+
+  return query select v_policy.id, v_policy.default_action, v_policy.require_signed_sender, v_policy.lifecycle_state;
+end;
+$$;
+
+create or replace function agent_board.evaluate_fleet_sender_policy(
+  p_sender_agent_id uuid,
+  p_recipient_agent_id uuid,
+  p_sender_machine_id uuid default null,
+  p_recipient_board_id uuid default null,
+  p_operation text default 'send_direct_message',
+  p_signature_evidence_id uuid default null,
+  p_direct_rpc_compatibility boolean default false
+)
+returns table(
+  allowed boolean,
+  actionable boolean,
+  denial_class text,
+  receive_policy_id uuid,
+  trust_domain_id uuid,
+  trust_set_id uuid,
+  requires_signature boolean,
+  evaluated_at timestamptz
+)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_machine agent_board.fleet_machines%rowtype;
+  v_binding agent_board.fleet_machine_agents%rowtype;
+  v_policy agent_board.fleet_receive_policies%rowtype;
+  v_trust_set agent_board.fleet_trust_sets%rowtype;
+  v_signature agent_board.signature_evidence%rowtype;
+  v_actor_agent_id uuid;
+  v_action text;
+  v_denial text;
+begin
+  if not agent_board._is_service_role() then
+    v_actor_agent_id := agent_board.current_agent_id();
+    if v_actor_agent_id is null
+       or (v_actor_agent_id <> p_sender_agent_id and v_actor_agent_id <> p_recipient_agent_id) then
+      raise exception 'fleet policy evaluation must involve current_agent_id()' using errcode = '42501';
+    end if;
+  end if;
+
+  select fma.*
+    into v_binding
+    from agent_board.fleet_machine_agents fma
+    join agent_board.fleet_machines fm on fm.id = fma.machine_id
+   where fma.agent_id = p_sender_agent_id
+     and fma.lifecycle_state = 'active'
+     and fm.lifecycle_state = 'active'
+     and (p_sender_machine_id is null or fma.machine_id = p_sender_machine_id)
+   order by fma.updated_at desc
+   limit 1;
+
+  if v_binding.id is not null then
+    select * into v_machine from agent_board.fleet_machines where id = v_binding.machine_id;
+  elsif p_sender_machine_id is not null then
+    select * into v_machine from agent_board.fleet_machines where id = p_sender_machine_id;
+  end if;
+
+  if v_machine.id is null then
+    return query select false, false, 'domain_denied'::text, null::uuid, null::uuid, null::uuid, false, now();
+    return;
+  end if;
+
+  if v_machine.lifecycle_state = 'revoked'
+     or exists (
+       select 1 from agent_board.fleet_revocation_events fre
+        where (fre.subject_kind = 'machine' and fre.subject_id = v_machine.id)
+           or (fre.subject_kind = 'trust_domain' and fre.subject_id = v_machine.trust_domain_id)
+           or (fre.subject_kind = 'agent' and fre.subject_id = p_sender_agent_id)
+     ) then
+    return query select false, false, 'machine_revoked'::text, null::uuid, v_machine.trust_domain_id, null::uuid, false, now();
+    return;
+  end if;
+
+  select frp.*
+    into v_policy
+    from agent_board.fleet_receive_policies frp
+   where frp.lifecycle_state = 'active'
+     and (frp.recipient_agent_id is null or frp.recipient_agent_id = p_recipient_agent_id)
+     and (frp.board_id is null or frp.board_id = p_recipient_board_id)
+     and (frp.trust_domain_id is null or frp.trust_domain_id = v_machine.trust_domain_id)
+   order by
+     case when frp.board_id is not null then 0 else 1 end,
+     case when frp.trust_domain_id is not null then 0 else 1 end,
+     frp.updated_at desc
+   limit 1;
+
+  if v_policy.id is null then
+    return query select false, false, 'recipient_policy_denied'::text, null::uuid, v_machine.trust_domain_id, null::uuid, false, now();
+    return;
+  end if;
+
+  if v_policy.require_signed_sender then
+    if p_signature_evidence_id is null then
+      return query select false, false, 'signature_required'::text, v_policy.id, v_machine.trust_domain_id, null::uuid, true, now();
+      return;
+    end if;
+
+    select * into v_signature from agent_board.signature_evidence where id = p_signature_evidence_id;
+    if v_signature.id is null or v_signature.agent_id <> p_sender_agent_id then
+      return query select false, false, 'signature_required'::text, v_policy.id, v_machine.trust_domain_id, null::uuid, true, now();
+      return;
+    end if;
+
+    if v_signature.failure_class = 'key_revoked'
+       or exists (
+         select 1
+           from agent_board.fleet_revocation_events fre
+          where fre.subject_kind = 'signing_key'
+            and fre.subject_id = v_signature.signing_key_id
+       )
+       or exists (
+         select 1
+           from agent_board.agent_signing_keys ask
+          where ask.id = v_signature.signing_key_id
+            and ask.status in ('revoked', 'compromised')
+       ) then
+      return query select false, false, 'key_revoked'::text, v_policy.id, v_machine.trust_domain_id, null::uuid, true, now();
+      return;
+    end if;
+
+    if v_signature.verification_status not in ('verified', 'warn', 'observed') then
+      return query select false, false, 'signature_required'::text, v_policy.id, v_machine.trust_domain_id, null::uuid, true, now();
+      return;
+    end if;
+  end if;
+
+  select fts.*
+    into v_trust_set
+    from agent_board.fleet_trust_sets fts
+   where fts.receive_policy_id = v_policy.id
+     and fts.lifecycle_state = 'active'
+     and (
+       fts.trust_domain_id = v_machine.trust_domain_id
+       or fts.machine_id = v_machine.id
+       or fts.agent_id = p_sender_agent_id
+       or (v_binding.repo_scope_id is not null and fts.repo_scope_id = v_binding.repo_scope_id)
+       or exists (
+         select 1
+           from agent_board.fleet_repo_scopes frs
+          where frs.id = v_binding.repo_scope_id
+            and fts.harness_registration_id = frs.harness_registration_id
+       )
+     )
+   order by
+     case fts.effect
+       when 'deny' then 0
+       when 'quarantine' then 1
+       when 'non_actionable' then 2
+       else 3
+     end,
+     fts.updated_at desc
+   limit 1;
+
+  v_action := coalesce(v_trust_set.effect, v_policy.default_action);
+  v_denial := case
+    when v_action = 'deny' and v_trust_set.id is not null then 'sender_denied'
+    when v_action = 'deny' then 'recipient_policy_denied'
+    when v_action = 'quarantine' then 'quarantined'
+    else null
+  end;
+
+  return query
+  select
+    v_action in ('allow', 'non_actionable'),
+    v_action = 'allow',
+    v_denial,
+    v_policy.id,
+    v_machine.trust_domain_id,
+    v_trust_set.id,
+    v_policy.require_signed_sender,
+    now();
+end;
+$$;
+
+create or replace function agent_board.revoke_fleet_subject(
+  p_subject_kind text,
+  p_subject_id uuid,
+  p_revoked_by_agent_id uuid,
+  p_revocation_reason text,
+  p_metadata jsonb default '{}'::jsonb
+)
+returns table(revocation_event_id uuid, subject_kind text, effective_at timestamptz)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_event agent_board.fleet_revocation_events%rowtype;
+  v_actor_agent_id uuid;
+begin
+  if p_subject_kind not in ('trust_domain', 'machine', 'harness', 'repo_scope', 'agent', 'signing_key', 'credential') then
+    raise exception 'unsupported fleet revocation subject' using errcode = '22023';
+  end if;
+
+  v_actor_agent_id := agent_board._resolved_actor_agent_id(p_revoked_by_agent_id, 'p_revoked_by_agent_id');
+
+  if not agent_board._is_service_role() then
+    if p_subject_kind = 'trust_domain' and not exists (
+      select 1 from agent_board.fleet_trust_domains ftd
+       where ftd.id = p_subject_id and ftd.owner_agent_id = v_actor_agent_id
+    ) then
+      raise exception 'trust domain is not owned by current_agent_id()' using errcode = '42501';
+    elsif p_subject_kind = 'machine' and not exists (
+      select 1 from agent_board.fleet_machines fm
+       where fm.id = p_subject_id and fm.owner_agent_id = v_actor_agent_id
+    ) then
+      raise exception 'machine is not owned by current_agent_id()' using errcode = '42501';
+    elsif p_subject_kind = 'harness' and not exists (
+      select 1
+        from agent_board.fleet_harness_registrations fhr
+        join agent_board.fleet_machines fm on fm.id = fhr.machine_id
+       where fhr.id = p_subject_id and fm.owner_agent_id = v_actor_agent_id
+    ) then
+      raise exception 'harness is not owned by current_agent_id()' using errcode = '42501';
+    elsif p_subject_kind = 'repo_scope' and not exists (
+      select 1
+        from agent_board.fleet_repo_scopes frs
+        join agent_board.fleet_harness_registrations fhr on fhr.id = frs.harness_registration_id
+        join agent_board.fleet_machines fm on fm.id = fhr.machine_id
+       where frs.id = p_subject_id and fm.owner_agent_id = v_actor_agent_id
+    ) then
+      raise exception 'repo scope is not owned by current_agent_id()' using errcode = '42501';
+    elsif p_subject_kind = 'agent' and p_subject_id <> v_actor_agent_id then
+      raise exception 'agent revocation must target current_agent_id()' using errcode = '42501';
+    elsif p_subject_kind = 'signing_key' and not exists (
+      select 1 from agent_board.agent_signing_keys ask
+       where ask.id = p_subject_id and ask.agent_id = v_actor_agent_id
+    ) then
+      raise exception 'signing key is not owned by current_agent_id()' using errcode = '42501';
+    elsif p_subject_kind = 'credential' and not exists (
+      select 1 from agent_board.agent_credentials ac
+       where ac.id = p_subject_id and ac.agent_id = v_actor_agent_id
+    ) then
+      raise exception 'credential is not owned by current_agent_id()' using errcode = '42501';
+    end if;
+  end if;
+
+  select *
+    into v_event
+    from agent_board.fleet_revocation_events fre
+   where fre.subject_kind = p_subject_kind
+     and fre.subject_id = p_subject_id
+   limit 1;
+
+  if v_event.id is null then
+    insert into agent_board.fleet_revocation_events(
+      subject_kind,
+      subject_id,
+      trust_domain_id,
+      machine_id,
+      harness_registration_id,
+      repo_scope_id,
+      agent_id,
+      signing_key_id,
+      revoked_by_agent_id,
+      revocation_reason,
+      metadata
+    )
+    values (
+      p_subject_kind,
+      p_subject_id,
+      case when p_subject_kind = 'trust_domain' then p_subject_id end,
+      case when p_subject_kind = 'machine' then p_subject_id end,
+      case when p_subject_kind = 'harness' then p_subject_id end,
+      case when p_subject_kind = 'repo_scope' then p_subject_id end,
+      case when p_subject_kind = 'agent' then p_subject_id end,
+      case when p_subject_kind = 'signing_key' then p_subject_id end,
+      p_revoked_by_agent_id,
+      trim(coalesce(p_revocation_reason, 'operator revocation')),
+      coalesce(p_metadata, '{}'::jsonb) || jsonb_build_object('redacted', true, 'metadata-safe', true)
+    )
+    returning * into v_event;
+  else
+    update agent_board.fleet_revocation_events fre
+       set revoked_by_agent_id = p_revoked_by_agent_id,
+           revocation_reason = trim(coalesce(p_revocation_reason, 'operator revocation')),
+           metadata = coalesce(p_metadata, '{}'::jsonb) || jsonb_build_object('redacted', true, 'metadata-safe', true)
+     where fre.id = v_event.id
+    returning * into v_event;
+  end if;
+
+  if p_subject_kind = 'trust_domain' then
+    update agent_board.fleet_trust_domains
+       set lifecycle_state = 'revoked', revoked_at = v_event.effective_at, updated_at = now()
+     where id = p_subject_id;
+  elsif p_subject_kind = 'machine' then
+    update agent_board.fleet_machines
+       set lifecycle_state = 'revoked', revoked_at = v_event.effective_at, updated_at = now()
+     where id = p_subject_id;
+  elsif p_subject_kind = 'harness' then
+    update agent_board.fleet_harness_registrations
+       set lifecycle_state = 'revoked', revoked_at = v_event.effective_at, updated_at = now()
+     where id = p_subject_id;
+  elsif p_subject_kind = 'repo_scope' then
+    update agent_board.fleet_repo_scopes
+       set lifecycle_state = 'revoked', revoked_at = v_event.effective_at, updated_at = now()
+     where id = p_subject_id;
+  elsif p_subject_kind = 'agent' then
+    update agent_board.fleet_machine_agents
+       set lifecycle_state = 'revoked', revoked_at = v_event.effective_at, updated_at = now()
+     where agent_id = p_subject_id;
+  elsif p_subject_kind = 'signing_key' then
+    update agent_board.agent_signing_keys
+       set status = case when status = 'compromised' then status else 'revoked' end,
+           proof_state = 'revoked',
+           revoked_at = coalesce(revoked_at, v_event.effective_at),
+           revoked_by_agent_id = p_revoked_by_agent_id,
+           revocation_reason = trim(coalesce(p_revocation_reason, 'operator revocation')),
+           updated_at = now()
+     where id = p_subject_id;
+  end if;
+
+  return query select v_event.id, v_event.subject_kind, v_event.effective_at;
+end;
+$$;
+
+revoke all on function agent_board.register_fleet_machine(uuid, uuid, text, text, text, jsonb) from public, anon;
+revoke all on function agent_board.set_fleet_receive_policy(uuid, text, text, boolean, uuid, uuid, jsonb) from public, anon;
+revoke all on function agent_board.evaluate_fleet_sender_policy(uuid, uuid, uuid, uuid, text, uuid, boolean) from public, anon;
+revoke all on function agent_board.revoke_fleet_subject(text, uuid, uuid, text, jsonb) from public, anon;
+
+grant execute on function agent_board.register_fleet_machine(uuid, uuid, text, text, text, jsonb) to authenticated, service_role;
+grant execute on function agent_board.set_fleet_receive_policy(uuid, text, text, boolean, uuid, uuid, jsonb) to authenticated, service_role;
+grant execute on function agent_board.evaluate_fleet_sender_policy(uuid, uuid, uuid, uuid, text, uuid, boolean) to authenticated, service_role;
+grant execute on function agent_board.revoke_fleet_subject(text, uuid, uuid, text, jsonb) to authenticated, service_role;

package/migrations/20260628000006_agent_board_fleet_read_models.sql

@@ -0,0 +1,170 @@
+create or replace view agent_board.v_fleet_machine_status
+with (security_invoker = true)
+as
+select
+  fm.id as machine_id,
+  fm.trust_domain_id,
+  ftd.slug as trust_domain_slug,
+  ftd.domain_kind,
+  fm.owner_agent_id,
+  fm.machine_label,
+  fm.machine_fingerprint,
+  fm.lifecycle_state as machine_lifecycle_state,
+  fm.enrollment_source,
+  fm.enrolled_at,
+  fm.revoked_at,
+  exists (
+    select 1
+      from agent_board.fleet_revocation_events fre
+     where fre.subject_kind = 'machine'
+       and fre.subject_id = fm.id
+  ) as machine_revoked,
+  coalesce(active_agents.active_agent_count, 0)::bigint as active_agent_count,
+  active_agents.latest_agent_binding_updated_at
+from agent_board.fleet_machines fm
+join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
+left join lateral (
+  select
+    count(*) filter (where fma.lifecycle_state = 'active') as active_agent_count,
+    max(fma.updated_at) as latest_agent_binding_updated_at
+    from agent_board.fleet_machine_agents fma
+   where fma.machine_id = fm.id
+) active_agents on true;
+
+create or replace view agent_board.v_fleet_receive_policy_status
+with (security_invoker = true)
+as
+select
+  frp.id as receive_policy_id,
+  frp.recipient_agent_id,
+  frp.board_id,
+  frp.trust_domain_id,
+  frp.policy_name,
+  frp.default_action,
+  frp.require_signed_sender,
+  frp.lifecycle_state,
+  coalesce(trust_sets.allow_trust_set_count, 0)::bigint as allow_trust_set_count,
+  coalesce(trust_sets.restrictive_trust_set_count, 0)::bigint as restrictive_trust_set_count,
+  frp.updated_at
+from agent_board.fleet_receive_policies frp
+left join lateral (
+  select
+    count(*) filter (where fts.effect = 'allow' and fts.lifecycle_state = 'active') as allow_trust_set_count,
+    count(*) filter (where fts.effect in ('deny', 'quarantine', 'non_actionable') and fts.lifecycle_state = 'active') as restrictive_trust_set_count
+    from agent_board.fleet_trust_sets fts
+   where fts.receive_policy_id = frp.id
+) trust_sets on true;
+
+drop view if exists agent_board.v_fleet_delivery_posture;
+
+create or replace view agent_board.v_fleet_delivery_posture
+with (security_invoker = true)
+as
+select
+  dr.id as delivery_recipient_id,
+  dr.recipient_agent_id,
+  dr.delivery_mode,
+  dr.source_kind,
+  dr.source_message_id,
+  dr.source_task_id,
+  dr.source_delegation_id,
+  dr.board_id,
+  coalesce(m.author_agent_id, t.created_by_agent_id, d.delegated_by_agent_id) as sender_agent_id,
+  fm.id as sender_machine_id,
+  fm.trust_domain_id,
+  frp.id as receive_policy_id,
+  frp.require_signed_sender as requires_signature,
+  fts.id as trust_set_id,
+  coalesce(fts.effect, frp.default_action) as policy_action,
+  case
+    when fm.id is null then 'domain_denied'
+    when fm.lifecycle_state = 'revoked' then 'machine_revoked'
+    when frp.id is null then 'recipient_policy_denied'
+    when frp.require_signed_sender and se.id is null then 'signature_required'
+    when se.failure_class = 'key_revoked' or ask.status in ('revoked', 'compromised') then 'key_revoked'
+    when coalesce(fts.effect, frp.default_action) = 'quarantine' then 'quarantined'
+    when coalesce(fts.effect, frp.default_action) = 'deny' and fts.id is not null then 'sender_denied'
+    when coalesce(fts.effect, frp.default_action) = 'deny' then 'recipient_policy_denied'
+    else null
+  end as denial_class,
+  coalesce(fts.effect, frp.default_action) in ('allow', 'non_actionable') as allowed,
+  coalesce(fts.effect, frp.default_action) = 'allow' and coalesce(ii.visible_in_inbox, true) as actionable,
+  se.id as signature_evidence_id,
+  se.verification_status,
+  ask.fingerprint as key_fingerprint,
+  se.key_version,
+  se.algorithm,
+  se.verified_at,
+  ii.action_state as inbox_action_state,
+  ii.fetch_descriptor,
+  dr.created_at
+from agent_board.delivery_recipients dr
+left join agent_board.messages m on m.id = dr.source_message_id
+left join agent_board.tasks t on t.id = dr.source_task_id
+left join agent_board.delegations d on d.id = dr.source_delegation_id
+left join agent_board.inbox_items ii on ii.delivery_recipient_id = dr.id
+left join lateral (
+  select fma.*
+    from agent_board.fleet_machine_agents fma
+    join agent_board.fleet_machines fm_inner on fm_inner.id = fma.machine_id
+   where fma.agent_id = coalesce(m.author_agent_id, t.created_by_agent_id, d.delegated_by_agent_id)
+     and fma.lifecycle_state = 'active'
+     and fm_inner.lifecycle_state = 'active'
+   order by fma.updated_at desc
+   limit 1
+) fma on true
+left join agent_board.fleet_machines fm on fm.id = fma.machine_id
+left join lateral (
+  select frp_inner.*
+    from agent_board.fleet_receive_policies frp_inner
+   where frp_inner.lifecycle_state = 'active'
+     and (frp_inner.recipient_agent_id is null or frp_inner.recipient_agent_id = dr.recipient_agent_id)
+     and (frp_inner.board_id is null or frp_inner.board_id = dr.board_id)
+     and (frp_inner.trust_domain_id is null or frp_inner.trust_domain_id = fm.trust_domain_id)
+   order by
+     case when frp_inner.board_id is not null then 0 else 1 end,
+     case when frp_inner.trust_domain_id is not null then 0 else 1 end,
+     frp_inner.updated_at desc
+   limit 1
+) frp on true
+left join lateral (
+  select fts_inner.*
+    from agent_board.fleet_trust_sets fts_inner
+   where fts_inner.receive_policy_id = frp.id
+     and fts_inner.lifecycle_state = 'active'
+     and (
+       fts_inner.trust_domain_id = fm.trust_domain_id
+       or fts_inner.machine_id = fm.id
+       or fts_inner.agent_id = coalesce(m.author_agent_id, t.created_by_agent_id, d.delegated_by_agent_id)
+       or fts_inner.repo_scope_id = fma.repo_scope_id
+     )
+   order by
+     case fts_inner.effect
+       when 'deny' then 0
+       when 'quarantine' then 1
+       when 'non_actionable' then 2
+       else 3
+     end,
+     fts_inner.updated_at desc
+   limit 1
+) fts on true
+left join lateral (
+  select se_inner.*
+    from agent_board.signature_evidence se_inner
+   where (se_inner.source_kind = 'delivery_recipient' and se_inner.source_delivery_recipient_id = dr.id)
+      or (se_inner.source_kind = 'message' and se_inner.source_message_id = dr.source_message_id)
+      or (se_inner.source_kind = 'task_event' and exists (
+           select 1
+             from agent_board.task_events te
+            where te.id = se_inner.source_task_event_id
+              and te.task_id = dr.source_task_id
+         ))
+   order by se_inner.created_at desc
+   limit 1
+) se on true
+left join agent_board.agent_signing_keys ask on ask.id = se.signing_key_id;
+
+grant select on agent_board.v_fleet_machine_status,
+  agent_board.v_fleet_receive_policy_status,
+  agent_board.v_fleet_delivery_posture
+to authenticated, service_role;