Tags: gekap/hol-guard
Tags
feat(guard): establish native data plane ownership v2 (hashgraph-onli… …ne#2682) * feat(guard): establish native data plane ownership v2 Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * test(ci): advance suite ratchet for ownership coverage Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(ci): harden native route ownership evidence Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(ci): validate harness route states Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * refactor(ci): satisfy native ownership quality gates Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(ci): preserve recursive ownership coverage Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(daemon): count terminal fail-safe routes Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * refactor(daemon): isolate terminal route receipts Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
fix(dashboard): hide secondary risk summary that restates the primary… … detail (hashgraph-online#2679) * fix(dashboard): hide secondary risk summary that restates the primary detail Compound shell reviews join every segment finding into one prefixed risk summary. When that text only restates the detail already shown in the primary review card, plus generic review boilerplate, the approval card rendered the same finding twice under two headings. Treat a compound findings summary as duplicate when its remaining text is empty or known review boilerplate, and resolve the primary detail from the trigger summary fallback as the primary card does. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * refactor(dashboard): extract secondary risk dedupe behind size ratchet Move the duplicate-review detection cluster (secondary risk summary, stopped command text, envelope display text) into secondary-risk-dedupe and re-export it from approval-center-utils so existing imports keep working. approval-center-utils and phase09-review.test.ts sit on the oversized-file ratchet, so the compound-findings regression tests move to a dedicated secondary-risk-dedupe test file wired into the test chain. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(dashboard): retain appended transmission warnings in prompt risk summaries Add transmit to the safety-context verb list so an appended explanation such as transmitting private data to a third-party service keeps the secondary risk summary visible instead of being treated as duplicate prompt text. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
fix(guard): repair Core sidecar Mach-O headers after manifest rewrite (… …hashgraph-online#2662) * fix(guard): repair Core sidecar Mach-O headers after manifest rewrite Rewriting the appended archive changes the file length, so strip the stale signature, expand LINKEDIT, and sign again before smoke checks. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(guard): strip Core sidecar signature before native manifest rewrite Keep Mach-O signature offsets valid so LINKEDIT repair can cover the rewritten archive before the sidecar is signed again. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
fix(guard): re-sign Core sidecar after native manifest rewrite (hashg… …raph-online#2661) Rewriting the bundled native manifest invalidates the outer PyInstaller signature, so sign the sidecar again before smoke checks. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
fix(guard): reseal Core native manifest after PyInstaller signing (ha… …shgraph-online#2659) * fix(guard): reseal Core native manifest after PyInstaller signing PyInstaller re-signs Mach-O data entries, so rewrite the in-archive native runtime digest to match the packaged bytes before verify. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(guard): rewrite Core native archive when resealing the manifest PyInstaller compresses DATA entries, so rebuild the CArchive TOC instead of requiring an in-place same-length manifest payload. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(guard): reject Core archive TOC entries that overlap the payload Validate CArchive entry ranges against the payload boundary and require extracted native bytes to match the TOC uncompressed size. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
fix(guard): bundle native runtime in Desktop Core sidecars (hashgraph… …-online#2658) * fix(guard): bundle native runtime in Desktop Core sidecars Auto command review fail-closes without hol-guard-runtime. Copy the attested platform-wheel runtime into the signed Core executable and retry attested CLI review when the daemon reports native unavailability. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(guard): restore bundled native execute after DATA extract PyInstaller DATA omits owner execute; auto PreToolUse still needs a launchable hol-guard-runtime. Reused Core assets stay immutable. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * docs(guard): document native post-tool unavailability Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * test(guard): raise live-hook continuation timeout in outbox coverage Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
fix(guard): require a connected app to finish protection repair (hash… …graph-online#2657) * fix(guard): require a connected app to finish protection repair Empty managed installs made all-check repair succeed while Protect stayed on Retry repair. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(guard): keep integrity failures ahead of connect-app repair All-check repair now reports a failed local integrity proof before asking to connect an app, and Protect orchestration moves out of the oversized app shell. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(guard): connect the first visible app when none are managed Empty managed installs still offered Codex. Prefer an observed fleet app for the Protect connect action. Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
fix(guard): accept Linux desktop terminal enrollment (hashgraph-onlin… …e#2656) * fix(guard): accept local desktop terminals for enrollment Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix(guard): bind enrollment to local session authority Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * test(guard): refresh reviewed decision artifacts Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
fix(storage): preserve state during recovery (hashgraph-online#2655) * fix(storage): preserve state during recovery Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * test(storage): reject same-size recovery races Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * chore(ci): update test suite ratchet Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * refactor(storage): keep persistence checks bounded Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
PreviousNext