Synced Search Under Tool Policies

A search on synced records now goes through Tool Policies the same way filters and returned fields do. Before the search runs, StackOne checks which of the action’s text fields the policy withholds and searches only the rest, so a match can no longer show that a masked field holds a value.

What’s new

• Search skips withheld fields. Under a policy, a search runs only over the text fields the policy allows. A label rule withholds every field it might match. Without a policy, search covers every field as before.
• policyMetadata.search reports narrowing. It reads narrowed when the policy took some fields out of the search and none when it left no field to search, so an empty result is not mistaken for a search that matched nothing. It never names the withheld fields.
• Redact PII covers search. While a Redact PII rule covers a class, a search that could reach a field of that class is refused, the same as filters, sorts and aggregations.
• REST and MCP behave the same. The rules apply on POST /actions/rpc/synced and on the MCP synced tools.

The Tool Policies docs cover the rule builder, and the Deep Query docs explain synced search. This extends the governance of synced reads from the Tool Policies on Writes and Synced Reads entry.