v0.12.55: @newsroom.writer: Cedar and the policy vault

One new article written here from a voice memo.

Cedar and the policy vault is a debrief on Cedar (open-sourced by AWS in May 2023 under Apache 2.0, in the CNCF Sandbox since 8 October 2025, the language of Verified Permissions and AgentCore Policy, formally modelled in Lean), a crosswalk between its terms and our agent behaviour policies, and a brief for the agent that will build the MVP. A local demo put Cedar policies, schema, entities and tests in an sgit vault: a gate refused an invalid version, tags were signed by the releasing clone, enforcement clones held only the read key, and fifteen decisions were sealed into a hash-chained append lane that an auditor read back intact. It also showed that Cedar skips a policy whose evaluation fails, so an invalid forbid fails open. The memo's guess that policies ship as loose JSON was corrected: the managed store validates strictly, but its API has no history or export and deletion is permanent. Three figures.