Add audit-all env capture policy#141
Merged
Merged
Conversation
Collaborator
Author
🪙 33% AI-authored · 4 files
💬 The ask
📍 What shipped
Tip ✅ Security scan cleanNo credentials leaked in this branch's diff. h5i scanned every added line against the secret rule pack and found nothing to rotate. Note Duplicate-code scan clean — no copy-paste blocks introduced. 🧠 Reasoning by file — 6016 nodes across 5 lanes, latest 24 only%%{init: {"flowchart": {"nodeSpacing": 42, "rankSpacing": 48, "diagramPadding": 14}, "themeVariables": {"fontSize": "18px"}} }%%
flowchart TB
subgraph lane_0["📄 src/sandbox.rs · 10 ops"]
direction LR
n_lane_0_0["EDIT"]:::a
n_lane_0_1["READ"]:::o
n_lane_0_2["EDIT"]:::a
n_lane_0_3["READ × 4"]:::o
n_lane_0_4["EDIT"]:::a
n_lane_0_5["READ × 2"]:::o
n_lane_0_0 --> n_lane_0_1
n_lane_0_1 --> n_lane_0_2
n_lane_0_2 --> n_lane_0_3
n_lane_0_3 --> n_lane_0_4
n_lane_0_4 --> n_lane_0_5
end
subgraph lane_1["📄 MANUAL.md · 5 ops"]
direction LR
n_lane_1_0["READ × 4"]:::o
n_lane_1_1["EDIT"]:::a
n_lane_1_0 --> n_lane_1_1
end
subgraph lane_2["📄 tests/env_integration.rs · 2 ops"]
direction LR
n_lane_2_0["EDIT × 2"]:::a
end
subgraph lane_3["📄 src/env.rs · 1 op"]
direction LR
n_lane_3_0["EDIT"]:::a
end
subgraph lane_4["🗂 Other · 6 nodes"]
direction LR
n_lane_4_0["READ · searched shell/|audit/|capture” for ”create/|env”"]:::o
n_lane_4_1["READ · searched MANUAL.md for ”env””"]:::o
n_lane_4_2["READ · searched MANUAL.md for ”env””"]:::o
n_lane_4_3["READ · searched /”all/”” for ”=”"]:::o
n_lane_4_4["READ · searched /”all/”” for ”=”"]:::o
n_lane_4_5["READ · searched ResolvedPolicy” for ”struct”"]:::o
n_lane_4_0 --> n_lane_4_1
n_lane_4_1 --> n_lane_4_2
n_lane_4_2 --> n_lane_4_3
n_lane_4_3 --> n_lane_4_4
n_lane_4_4 --> n_lane_4_5
end
classDef o fill:#dbeafe,stroke:#1e3a8a,color:#0b1c4a;
classDef t fill:#fef3c7,stroke:#92400e,color:#3f2d05;
classDef a fill:#dcfce7,stroke:#166534,color:#0a2e16;
classDef n fill:#ede9fe,stroke:#5b21b6,color:#221251;
classDef m fill:#e5e7eb,stroke:#374151,color:#0b0f17;
Note 🪙 Token reduction — 14 captured tool outputs kept out of context: 193617 → 6040 tokens (96% saved, 187577 tokens). Full output is recoverable with By tool
📜 Per-commit provenance
|
…full-auditable-sandbox # Conflicts: # src/sandbox.rs
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.