Skip to content

Add audit-all env capture policy#141

Merged
Koukyosyumei merged 3 commits into
mainfrom
full-auditable-sandbox
Jun 15, 2026
Merged

Add audit-all env capture policy#141
Koukyosyumei merged 3 commits into
mainfrom
full-auditable-sandbox

Conversation

@Koukyosyumei

Copy link
Copy Markdown
Collaborator

No description provided.

@Koukyosyumei

Koukyosyumei commented Jun 15, 2026

Copy link
Copy Markdown
Collaborator Author

🪙 33% AI-authored · 4 files

1 AI commit

1 / 342.4 : 1
AI commitsfiles touchedREAD : EDIT

💬 The ask

"Implement audit.capture = all in env policy with h5i env create --audit all, document it, and add focused test coverage."

📍 What shipped

  • ✓ Add audit-all env capture policy
  • ✓ Add audit-all env capture policy
  • ✓ Merge branch 'full-auditable-sandbox' of github.com:h5i-dev/h5i into full-auditable-sandbox

Tip

✅ Security scan clean

No credentials leaked in this branch's diff. h5i scanned every added line against the secret rule pack and found nothing to rotate.

Note

Duplicate-code scan clean — no copy-paste blocks introduced.

🧠 Reasoning by file — 6016 nodes across 5 lanes, latest 24 only
%%{init: {"flowchart": {"nodeSpacing": 42, "rankSpacing": 48, "diagramPadding": 14}, "themeVariables": {"fontSize": "18px"}} }%%
flowchart TB
  subgraph lane_0["📄 src/sandbox.rs · 10 ops"]
    direction LR
    n_lane_0_0["EDIT"]:::a
    n_lane_0_1["READ"]:::o
    n_lane_0_2["EDIT"]:::a
    n_lane_0_3["READ × 4"]:::o
    n_lane_0_4["EDIT"]:::a
    n_lane_0_5["READ × 2"]:::o
    n_lane_0_0 --> n_lane_0_1
    n_lane_0_1 --> n_lane_0_2
    n_lane_0_2 --> n_lane_0_3
    n_lane_0_3 --> n_lane_0_4
    n_lane_0_4 --> n_lane_0_5
  end
  subgraph lane_1["📄 MANUAL.md · 5 ops"]
    direction LR
    n_lane_1_0["READ × 4"]:::o
    n_lane_1_1["EDIT"]:::a
    n_lane_1_0 --> n_lane_1_1
  end
  subgraph lane_2["📄 tests/env_integration.rs · 2 ops"]
    direction LR
    n_lane_2_0["EDIT × 2"]:::a
  end
  subgraph lane_3["📄 src/env.rs · 1 op"]
    direction LR
    n_lane_3_0["EDIT"]:::a
  end
  subgraph lane_4["🗂 Other · 6 nodes"]
    direction LR
    n_lane_4_0["READ · searched shell/|audit/|capture” for ”create/|env”"]:::o
    n_lane_4_1["READ · searched MANUAL.md for ”env””"]:::o
    n_lane_4_2["READ · searched MANUAL.md for ”env””"]:::o
    n_lane_4_3["READ · searched /”all/”” for ”=”"]:::o
    n_lane_4_4["READ · searched /”all/”” for ”=”"]:::o
    n_lane_4_5["READ · searched ResolvedPolicy” for ”struct”"]:::o
    n_lane_4_0 --> n_lane_4_1
    n_lane_4_1 --> n_lane_4_2
    n_lane_4_2 --> n_lane_4_3
    n_lane_4_3 --> n_lane_4_4
    n_lane_4_4 --> n_lane_4_5
  end
  classDef o fill:#dbeafe,stroke:#1e3a8a,color:#0b1c4a;
  classDef t fill:#fef3c7,stroke:#92400e,color:#3f2d05;
  classDef a fill:#dcfce7,stroke:#166534,color:#0a2e16;
  classDef n fill:#ede9fe,stroke:#5b21b6,color:#221251;
  classDef m fill:#e5e7eb,stroke:#374151,color:#0b0f17;
Loading

Note

🪙 Token reduction — 14 captured tool outputs kept out of context: 193617 → 6040 tokens (96% saved, 187577 tokens). Full output is recoverable with h5i recall object.

By tool
Tool Captures Raw Summary Saved
cargo 8 188657 1946 98%
bash 5 4054 3181 21%
rustfmt 1 906 913 0%

📜 Per-commit provenance

85abb056 Add audit-all env capture policy

  • promptImplement audit.capture = all in env policy with h5i env create --audit all, document it, and add focused test coverage.
  • model unknown · agent codex

Generated by h5i · re-run h5i share pr post to refresh.

@Koukyosyumei Koukyosyumei merged commit 6618e35 into main Jun 15, 2026
5 checks passed
@Koukyosyumei Koukyosyumei deleted the full-auditable-sandbox branch June 15, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant