audit, advisories and doctors/setup work

src/Policy/StellaOps.Policy.Gateway/Program.cs

@@ -22,6 +22,7 @@ using StellaOps.Policy.Gateway.Services;
 using StellaOps.Policy.Deltas;
 using StellaOps.Policy.Engine.Gates;
 using StellaOps.Policy.Snapshots;
+using StellaOps.Policy.ToolLattice;
 using StellaOps.Policy.Persistence.Postgres;
 using Polly;
 using Polly.Extensions.Http;
@@ -100,6 +101,25 @@ builder.Services.AddOptions<PolicyGatewayOptions>()
     })
     .ValidateOnStart();
 
+builder.Services.AddOptions<ToolLatticeOptions>()
+    .Bind(builder.Configuration.GetSection($"{PolicyGatewayOptions.SectionName}:{ToolLatticeOptions.SectionName}"))
+    .Validate(options =>
+    {
+        try
+        {
+            options.Validate();
+            return true;
+        }
+        catch (Exception ex)
+        {
+            throw new OptionsValidationException(
+                ToolLatticeOptions.SectionName,
+                typeof(ToolLatticeOptions),
+                new[] { ex.Message });
+        }
+    })
+    .ValidateOnStart();
+
 builder.Services.AddSingleton(sp => sp.GetRequiredService<IOptions<PolicyGatewayOptions>>().Value);
 builder.Services.AddSingleton(TimeProvider.System);
 builder.Services.AddRouting(options => options.LowercaseUrls = true);
@@ -151,6 +171,8 @@ builder.Services.AddScoped<StellaOps.Policy.Persistence.Postgres.Repositories.IE
 builder.Services.AddScoped<StellaOps.Policy.Engine.Services.IExceptionApprovalRulesService,
     StellaOps.Policy.Engine.Services.ExceptionApprovalRulesService>();
 
+builder.Services.AddSingleton<IToolAccessEvaluator, ToolAccessEvaluator>();
+
 builder.Services.AddStellaOpsResourceServerAuthentication(
     builder.Configuration,
     configurationSection: $"{PolicyGatewayOptions.SectionName}:ResourceServer");
@@ -533,6 +555,9 @@ app.MapExceptionApprovalEndpoints();
 // Governance endpoints (Sprint: SPRINT_20251229_021a_FE_policy_governance_controls, Task: GOV-018)
 app.MapGovernanceEndpoints();
 
+// Assistant tool lattice endpoints (Sprint: SPRINT_20260113_005_POLICY_assistant_tool_lattice)
+app.MapToolLatticeEndpoints();
+
 app.Run();
 
 static IAsyncPolicy<HttpResponseMessage> CreateAuthorityRetryPolicy(IServiceProvider provider)