Area: policy — feature · found via WaveHouse-Stats dogfooding
Expected: limit a role (especially public) to "only the last N days."
Actual: only row-count and exec-time caps exist (internal/policy/policy.go:31-40 — MaxRows, MaxExecutionTimeMs); filter can't express a rolling now() - INTERVAL, and the public role has no claims to template.
Impact (Stats): moot for us (public GitHub activity isn't time-confidential); would matter for sensitive datasets.
Scope: a per-role rolling time-window / max-lookback constraint.
From WAVEHOUSE-FEEDBACK.md (WaveHouse-Stats dogfooding); validated by code-read against 0f8826c on 2026-06-04.
Area: policy — feature · found via WaveHouse-Stats dogfooding
Expected: limit a role (especially public) to "only the last N days."
Actual: only row-count and exec-time caps exist (
internal/policy/policy.go:31-40—MaxRows,MaxExecutionTimeMs);filtercan't express a rollingnow() - INTERVAL, and the public role has no claims to template.Impact (Stats): moot for us (public GitHub activity isn't time-confidential); would matter for sensitive datasets.
Scope: a per-role rolling time-window / max-lookback constraint.
From
WAVEHOUSE-FEEDBACK.md(WaveHouse-Stats dogfooding); validated by code-read against0f8826con 2026-06-04.