Configuration is intentionally not stable yet.

The target configuration domains are:

world id / package name
PgPaw/Postgres connection
actor sessions and Postgres role mapping
build validation policy
isolate slot limits
workflow concurrency
npm protocol prefix
MCP/HTTP exposure
Ragent/client access policy

Authorization remains in Postgres policy. Worldant configuration may declare capabilities, but it does not replace database authorization.