fix: route egress-blocked requests to local fallback - #97370

Open

mrkillbob wants to merge 37 commits into

NousResearch:mainfrom

mrkillbob:codex/local-egress-fallback-clean

Commits on Aug 28, 2026

fix: route egress-blocked requests to local fallback

Mike DeMott
authored and
Mike DeMott
committed
a3dd3f8

Commits on Sep 2, 2026

feat(security): add source-bound LLM egress firewall

Mike DeMott
authored and
mrkillbob
committed
49a3297
fix(security): bind outbound source segments

Mike DeMott
authored and
mrkillbob
committed
c22635a
fix(security): construct exact remote egress payloads

Mike DeMott
authored and
mrkillbob
committed
9cac0b3
fix(security): allow only policy-bound remote literals

Mike DeMott
authored and
mrkillbob
committed
800f023
fix(security): scan all authorized egress text

Mike DeMott
authored and
mrkillbob
committed
e29144f
fix(security): block non-finite egress scalars

Mike DeMott
authored and
mrkillbob
committed
77dadf5
feat(security): bind exact source slices to requests

Mike DeMott
authored and
mrkillbob
committed
c186890
fix(security): harden source provenance lifecycle

Mike DeMott
authored and
mrkillbob
committed
66fa693
fix(security): harden source-bound egress provenance

Mike DeMott
authored and
mrkillbob
committed
3163d78
feat(security): enforce remote egress at provider boundaries

Mike DeMott
authored and
mrkillbob
committed
278c85b
fix: enforce egress firewall for Claude

Mike DeMott
authored and
mrkillbob
committed
f188ab4
fix: allow JSON protocol acronym through egress scan

Mike DeMott
authored and
mrkillbob
committed
e7ba42b
fix: allow bounded large-context compression egress

Mike DeMott
authored and
mrkillbob
committed
ba9cfff
fix: route protected kanban work autonomously

Mike DeMott
authored and
mrkillbob
committed
1d3c244
fix(kanban): preserve protected remote worker capability

Mike DeMott
authored and
mrkillbob
committed
f279047
feat: add guarded local prompt mode

Mike DeMott
authored and
mrkillbob
committed
38df72f
fix(security): preserve sanitized segment boundaries

Mike DeMott
authored and
mrkillbob
committed
716f7f6
test(security): reject synthetic egress segmentation

Mike DeMott
authored and
mrkillbob
committed
343cb6f
fix(security): preserve provenance at provider boundary

Mike DeMott
authored and
mrkillbob
committed
692edd9
fix(security): bind presented source provenance

Mike DeMott
authored and
mrkillbob
committed
4a960da
fix(security): preserve provenance across tool loops

Mike DeMott
authored and
mrkillbob
committed
91db639
test(security): route interrupt check through egress

Mike DeMott
authored and
mrkillbob
committed
2054f1e
fix(egress): admit bounded matched terminal output safely

Mike DeMott
authored and
mrkillbob
committed
93fcd73
fix(egress): fail closed on credential-shaped assignments
mrkillbob
committed
9b47b3d
fix(egress): remove stale rebase marker
mrkillbob
committed
51aa4ca

Commits on Sep 5, 2026

Merge commit 'ee5b5ec21e576ccf9b941f9ff71330418415a5cb' into hermes/github-pr-feedback/2498d0fbd766c8a12c8b683425453e0ccfbe9bf4de13432a34c7101dd848b2fc
mrkillbob
committed
54981d4

Commits on Sep 6, 2026

Commits on Sep 7, 2026