up

docs/ui/policy-editor.md

@@ -10,11 +10,13 @@ The Policy Editor is the primary Console workspace for composing, simulating, an
 ## 1 · Access & Prerequisites
 
 - **Routes:** `/console/policy` (list) → `/console/policy/:policyId/:version?`.
-- **Scopes:** 
-  - `policy:write` to edit drafts, run lint/compile, attach simulations.
-  - `policy:submit` / `policy:review` / `policy:approve` for workflow actions.
-  - `policy:run` to trigger runs, `policy:runs` to inspect history.
-  - `findings:read` to open explain drawers.
+- **Scopes / roles:**
+  - `policy:author` (role `policy-author`) to edit drafts, run lint/compile, and execute quick simulations.
+  - `policy:review` (role `policy-reviewer`) to review drafts, leave comments, and request changes.
+  - `policy:approve` (role `policy-approver`) to approve or reject submissions.
+  - `policy:operate` (role `policy-operator`) to trigger batch simulations, promotions, and canary runs.
+  - `policy:audit` (role `policy-auditor`) to access immutable history and audit exports.
+  - `policy:simulate` to run simulations from Console; `findings:read` to open explain drawers.
 - **Feature flags:** `policyStudio.enabled` (defaults true once Policy Engine v2 API available).
 - **Browser support:** Evergreen Chrome, Edge, Firefox, Safari (last two versions). Uses WASM OPA sandbox; ensure COOP/COEP enabled per [UI architecture](../ARCHITECTURE_UI.md).
 
@@ -175,4 +177,3 @@ The Policy Editor is the primary Console workspace for composing, simulating, an
 ---
 
 *Last updated: 2025-10-26 (Sprint 20).*
-