refactor(policy): make OpenShell the sole durable policy source - #10515

Merged

ericksoa merged 127 commits into

mainfrom

refactor/openshell-policy-source-10514

Aug 30, 2026

Commits on Aug 28, 2026

docs(policy): make the OpenShell authority boundary explicit
ericksoa
authored
3a2403c
refactor(policy): remove NemoClaw policy lifecycle ownership
ericksoa
authored
4eeb7a0
fix(ci): resolve policy refactor regressions
prekshivyas
committed
4f1f5a5
test(ci): allow guardrail analysis for large diffs
prekshivyas
committed
57fca78
test(mcp): refresh reviewed runtime bundle pin
prekshivyas
committed
1be66e2
refactor(policy): remove residual policy authority scaffolding
ericksoa
committed
4589194
merge(main): integrate current sandbox identity checks
ericksoa
committed
8153a95
test(policy): align command coverage identity
prekshivyas
committed
fd9f5fe
fix(policy): eliminate portable source check-open race
prekshivyas
committed
5a0841c
refactor(policy): remove leftover lifecycle scaffolding
ericksoa
committed
5041ecb
fix(policy): retire transient rebuild handoffs
prekshivyas
committed
616edfa
refactor(policy): close live-policy review gaps
ericksoa
committed
840ea83
fix(policy): finish cutover recovery boundaries
ericksoa
committed
8a9dc6e
fix(mcp): refresh preserved policy after rebuild
prekshivyas
committed
7230ae3
test(messaging): align transient policy assertions
prekshivyas
committed
d42b3a8
test(policy): align cutover harness boundaries
prekshivyas
committed
382e4e8
test(ci): align live policy and rebuild fixtures
prekshivyas
committed
93d0944
fix(policy): bind remaining recovery authority
ericksoa
committed
af0f626
test(rebuild): retire registry-only recovery cases
ericksoa
committed
2be536e
fix(policy): normalize live base policy reads
ericksoa
committed
2e4af66
merge: resolve conflicts with main
github-actions[bot]
authored
3f3567f
fix(ci): refresh merged reviewed runtime bundle
ericksoa
committed
2c586fa
fix(rebuild): preserve complete OpenShell policy handoff
ericksoa
committed
849612f
merge: integrate current main
ericksoa
committed
14bac92
test(rebuild): align policy handoff rollback fixture
ericksoa
committed
c4c6af5
test(mcp): supply rebuild policy fixture
ericksoa
committed
c8e4603
merge: integrate latest main
ericksoa
committed
cfeff27
fix(rebuild): attach policy providers during recreation
ericksoa
committed
905a9d5
test(e2e): align live policy provenance
ericksoa
committed
18a0907
fix(rebuild): retain policy across recovery
prekshivyas
committed
5b17902
fix(shields): require bound forward policy for restore
prekshivyas
committed
e2f3a92
refactor(policy): end tier transport after create
prekshivyas
committed
4e78862
test(policy): assert live MCP policy outcomes
prekshivyas
committed
81b4847
merge: integrate latest main
prekshivyas
committed
06f8bda
test(rebuild): preserve backup phase mock contracts
prekshivyas
committed
11f1fe1
test(policy): align typed mock contracts
prekshivyas
committed
2984a9f
merge: integrate latest main
prekshivyas
committed
2e7f371
test(e2e): read messaging bindings after attachment
ericksoa
committed
c7acd26
Merge remote-tracking branch 'origin/refactor/openshell-policy-source-10514' into refactor/openshell-policy-source-10514
ericksoa
committed
6c75e50
test(e2e): require fail-closed legacy policy upgrade
ericksoa
committed
12698c9
refactor(policy): retire portable create policy history
ericksoa
committed
9d77ed7
fix(status): expose live policy availability
ericksoa
committed
4d15234
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
e038cca
fix(policy): resolve ambiguous writes by readback
ericksoa
committed
e2a3801
refactor(policy): remove rebuild preset shadow
ericksoa
committed
dc88e23
test(e2e): unify gateway upgrade terminal phase
ericksoa
committed
d7f2387
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
040254f
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
7c84cc9
fix(shields): recover without timer marker
ericksoa
committed
0280900
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
427e47b
ci(images): publish Pi PR candidate contracts
ericksoa
committed
f53e91c
test(pi): bind PR candidate receipts
ericksoa
committed
a592626
ci(images): trigger Pi receipt validation
ericksoa
committed
8acc2be

Commits on Aug 29, 2026

test(e2e): align policy ownership coverage
ericksoa
committed
0577450
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
cc9b11d
fix(e2e): converge on OpenShell live state
ericksoa
committed
c34731c
fix(policy): preserve host policy across rebuild
ericksoa
committed
798dd3e
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
24b9e16
refactor(policy): leave lifecycle ownership to OpenShell
ericksoa
committed
1591dd0
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
ba86791
ci(pi): refresh candidate qualification receipts
ericksoa
committed
8362269
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
3be914a
fix(policy): complete OpenShell ownership cutover
ericksoa
committed
cd77794
fix(policy): close lifecycle E2E gaps
ericksoa
committed
17a6647
fix(policy): complete runtime handoff
ericksoa
committed
f4323dc
fix(agent): use absolute setup shells
ericksoa
committed
3b4e325
fix(agent): report binary probe status
ericksoa
committed
fb412d2
fix(agent): use Bash for Pi setup probes
ericksoa
committed
52ae9c6
test(e2e): use Pi shell contract
ericksoa
committed
205ddf8
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
1faf6fe
test(destroy): complete retained recovery fixture
ericksoa
committed
67557c8
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
8438bca
test(e2e): follow current Pi ready marker
ericksoa
committed
751cdc4
test(e2e): exit current Pi TUI
ericksoa
committed
da6ff76
test(e2e): match visible PTY output
ericksoa
committed
1165c1f
test(e2e): exit Pi after turn completion
ericksoa
committed
a92464f
test(e2e): assert visible Pi response
ericksoa
committed
1d6b13b
test(e2e): expose visible PTY output
ericksoa
committed
c63598a
test(e2e): assert Pi session exit
ericksoa
committed
1e8a60a
test(e2e): capture Pi rebuild diagnostics
ericksoa
committed
0a19fa2
fix(state): restore missing JSON preferences
ericksoa
committed
e242430
test(e2e): isolate Pi sandbox probes
ericksoa
committed
fafab30
test(e2e): classify Pi credential references
ericksoa
committed
afc4c31
test(e2e): bind Pi log probe CLI
ericksoa
committed
ce81edf
test(e2e): map Pi PTY parity
ericksoa
committed
e922886
fix(ci): close policy cutover findings
ericksoa
committed
9be02de
fix(ci): suppress safe catalog open alert
ericksoa
committed
2cbfe9e
fix(onboard): reuse safe catalog reader
ericksoa
committed
bec4dd4

Commits on Aug 30, 2026

fix(policy): preserve live network policy on rebuild
ericksoa
committed
d7b2268
fix(rebuild): close live qualification gaps
ericksoa
committed
f000970
fix(policy): preserve OpenShell state through recovery
ericksoa
committed
0ee2ddd
fix(policy): preserve live authority across rebuild
ericksoa
committed
e78a1f5
fix(policy): apply explicit channel stop deltas
ericksoa
committed
d3e4304
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
99a2a04
fix(policy): derive stopped channel keys from manifests
ericksoa
committed
0c7a4e7
Merge remote-tracking branch 'origin/main' into refactor/openshell-policy-source-10514
ericksoa
committed
d454d28
fix(policy): exclude disabled channel entries from rebuild
ericksoa
committed
52db1a6
fix(policy): source active channel deltas from manifests
ericksoa
committed
ea22887
fix(channels): retire disabled agent config before remove
ericksoa
committed
a8f1931
fix(channels): clean retired config after rebuild
ericksoa
committed
1191c2a
fix(channels): carry removal tombstones through rebuild
ericksoa
committed
0e5d3da
test(e2e): verify queued channel removal retirement
ericksoa
committed
d3fd0ec
fix(channels): finalize removals after state restore
ericksoa
committed
e5501c8
fix(policy): close live-authority E2E regressions
ericksoa
committed
fd7f92f
test(e2e): satisfy live helper parity gates
ericksoa
committed
7de6723
test(e2e): align live session and removal evidence
ericksoa
committed
b566b73
test(e2e): align removal evidence and capture failures
ericksoa
committed
6329e2b
fix(rebuild): carry missing nonroot image identity
ericksoa
committed
1810bea
test(e2e): remove temporary rebuild diagnostics
ericksoa
committed
8d692a2
fix(policy): close live authority review gaps
ericksoa
committed
c89a38d
fix(rebuild): authorize only planned policy providers
ericksoa
committed
64c1ffd
fix(rebuild): authorize verified provider handoffs
ericksoa
committed
2f7c589
fix(rebuild): bind providers before startup command
ericksoa
committed
a7a63d2
chore(ci): refresh reviewed runtime bundle
ericksoa
committed
7d289f4
fix(connect): fail closed on Hermes registry authority
ericksoa
committed
317e467
fix(connect): preserve ordinary Hermes probe path
ericksoa
committed
f78c448
test(runtime): refresh reviewed bundle digest
ericksoa
committed
696fa05
docs(policy): restore published configuration routes
ericksoa
committed
24f0857
merge: resolve conflicts with main
github-actions[bot]
authored
ce609b8
fix(policy): preserve host authority during mutations
ericksoa
committed
062c946
fix(rebuild): close recovery lifecycle gaps
ericksoa
committed
d4467b1
fix(policy): close remaining authority gaps
ericksoa
committed
2f6ad90
fix(rebuild): reconcile observability policy delta
ericksoa
committed
bc72614
test(policy): align live read failure contracts
ericksoa
committed
542c326
test(policy): align bounded observation failures
ericksoa
committed
e755b9d
fix(policy): complete hosted advisor findings
ericksoa
committed
68d4198
test(policy): align channel preset ordering coverage
ericksoa
committed
b575380