Hi Prasanth, Looking forward to helping you on this one :) I also sent a proposal [1] for referenced-by support which has the same "engine trust" dimension as read restrictions, so hopefully both proposals can align on the definition (or non definition) of "trust" in those scenarios.
Cheers, Laurent [1] https://lists.apache.org/thread.html/psl1qvvvyt9j2ovgz7zw5t8ky75rjp6q On Wed, Nov 4, 2026 at 1:49 PM Prashant Singh <[email protected]> wrote: > Hi everyone, > > I'm picking back up the work on Row-Level Security (RLS) and Column-Level > Security (CLS) policies [1]. > > What's coming next, I'll share a new draft of the Polaris Policies proposal > soon. It will include: > • Updated policy definitions > • Policy attachment semantics built on Apache Iceberg ReadRestrictions > > Progress so far > Working with several project communities, we've added ReadRestrictions to > the Apache Iceberg spec [2]: > • Engine portability: policy results are expressed as Iceberg expressions > and actions, so any engine can enforce them consistently, one of the main > discussion points in the original PR, and it's now handled. > > Feedback is welcome as the new draft takes shape. Thanks to everyone who > has helped get us here. > > Best, > Prashant > > [1] https://github.com/apache/polaris/pull/2048 > [2] https://github.com/apache/iceberg/pull/13879 >
