[TheGreatAxios]

What changed

• Deleted stored workspace policies (workspace-policy/<name> artifacts a stored repository policy extended by id): sharedPolicySchema, WORKSPACE_POLICY_TITLE_PREFIX, storedPolicyPack, PolicySource.shared (contracts, triage comment header, hub responses, portal), the hub's shared-policy resolution and policy_shared_resolved log, the audit log's workspace-policy entries, the admin grant backfill's workspace-policy titles, the portal's ExtendedPolicyError, sharedPolicy in /api/integrations/pack-schema, shared in both mirror tool schemas, and exportPolicyFile's extended parameter.
• extends accepts only a repository (owner/name, or Bitbucket PROJECT/slug), using the same pattern as a policy's repo, in the policy file schema and the override schema, so the validator, /policy/validate, the extension and the Action refuse anything else. A stored repository policy with extends reads as corrupt: "Only a policy file can extend another repository's policy."
• Extending another repository's policy file is unchanged (extendedFilePack, resolvePolicy, policy.source.sharedFile).
• Docs: ARCHITECTURE, PRODUCT (merge rules restated under Shared policies; who may change saved rules kept), IMPLEMENTATION, triage-contracts README, extension README, setup skill and the user manual describe only .corbits-triage.yml and extending another repository's file.
• Production holds 0 workspace-policy/* artifacts and 0 stored repository policies with extends, so nothing migrates.

Verification

• bun run check and bun run lint pass.
• Tests: triage-contracts adds extends: art_123 in a policy file being refused, with and without rules, in friendly wording; the workspace-policy export row and save test are deleted; the hub store test is rewritten (pin, unknown checks, archived, config, and a stored policy with extends reads as corrupt). On current main: bun --conditions=intx-src test packages/triage-contracts packages/triage-workflows apps/hub/src/github apps/web/src/lib 1056 pass, 0 fail (Postgres tests included); web DOM tests 8 pass, 0 fail.
• No-model evals, before and after, identical: hidden-content 187/187; scan and risk tables unchanged.
• git grep -n -i "workspace.policy\|workspace-policy\|sharedPolicy\|storedPolicyPack" outside vendor/ matches only the kept SharedPolicy and readSharedPolicy, which the repository-file path uses.

Closes CL-11467

[linear-code]

CL-11467

[corbits-triage]

Triage: Unsure

Asking a maintainer about:

• pull request is over the files limit: 38 files (max 30)

Notes:

• Risk: medium (38 files, 9 recently fixed files)

Changed since the last verdict (Fail at 88488ec): 109 new commits.

[corbits-triage]

Triage requests changes:

• CI green: required checks are failing
• Merge conflicts: merge conflicts with base

Nothing triage asked to change still fails, so this request no longer stands.