[viethqb]

Docs for DG debt P7: platform #818 (merged, 10b0badf).

Known issues

• Closed: KI-287 (on Trino a row filter by classification now filters every table where the classification is only on columns, with one row-filter policy per such table; both engines agree; Who can read? names the rule; the rule dialog no longer asks for Create anyway for it) and KI-307 (the attach answers notices with clearance_masks_pending_table, shown as a warning toast; masks still written once the table exists).
• New: KI-333 (S2) a provisioned Trino engine with Per-user delegation → None gets no per-user baseline policies, so every query fails with Principal X cannot become user X. Confirmed in source: the baseline is seeded only when the engine delegates (supports_delegation()). S2, not S1, because the other three modes work.
• New: KI-334 (S3) the Governance Data page's engine label can show a running engine as provisioning (it reads the stored engine status from the browse API); cosmetic, cause not confirmed.
• Intro updated.

Pages

• Masks and row filters: Row filters by classification rewritten (both engines; per-table Trino policy; boot recompile; tag-vs-resource precedence note); new Kind hint; KI-287 removed from limits.
• Tagging: attach steps use the current labels (Add classification, Classification attached.) and describe the warning toast; limits updated.
• Clearance, Explain access, Check access: KI-307 / KI-287 wording replaced; explain's Engine gaps section replaced by Row filters by classification; row_filter_not_applied noted as removed.
• Provision: the None delegation mode links KI-333.
• Upgrade: notes for #818 (behaviour change on Trino, new notices shape, removed fields).
• REST reference regenerated from platform main's openapi.json; only control-plane-catalog (resource-tags notices) and perm (no trinoColumnOnly) are committed. workflow and the index count also differed and are left out. The explain page had no row_filter_not_applied row to remove.

The notice's wording for views is being changed in a separate platform PR, so the pages describe the behaviour and quote no sentence of it.

Not in this PR

• Screenshots (Wave 4). No existing shot shows the changed UI. New shots worth taking: the rule dialog's Kind hint for a classification row filter, and the attach warning toast.

npm run build passes (en and vi).

🤖 Generated with Claude Code