From 192073e582c2c30a61679bd5cd40d5f3cf578f01 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 10 Sep 2026 09:41:07 +0000 Subject: [PATCH 1/2] fix: add enclaves[].dynamic to CLI mapping table Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- docs/awf-config-spec.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/awf-config-spec.md b/docs/awf-config-spec.md index 7b3d7f5f4..68d252093 100644 --- a/docs/awf-config-spec.md +++ b/docs/awf-config-spec.md @@ -362,6 +362,7 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`). - `enclaves[].agent.maxModelTokens` → *(config-only; no CLI equivalent, see §14)* - `enclaves[].agent.github.cli` → *(config-only; deprecated closed legacy profile, see §14.3)* - `enclaves[].agent.tools.github` → *(config-only; closed GitHub MCP tool contract, see §14.3)* +- `enclaves[].dynamic` → *(config-only; no CLI equivalent; accepted but not executable in this release, see §14.1a)* When `container.dockerHostPathPrefix` points at a daemon-visible shared `/tmp` path, the implementation stages the invoking CLI binary together with `/etc/passwd`, `/etc/group`, and the generated chroot `/etc/hosts` under that shared path so chroot mode can bootstrap on split-filesystem ARC/DinD hosts. From afdcdd80fdd1543afd630786864e760fa5e406cb Mon Sep 17 00:00:00 2001 From: Landon Cox Date: Thu, 10 Sep 2026 11:06:09 -0700 Subject: [PATCH 2/2] Revise enclave agent config options and status Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- docs/awf-config-spec.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/awf-config-spec.md b/docs/awf-config-spec.md index 68d252093..8963dc019 100644 --- a/docs/awf-config-spec.md +++ b/docs/awf-config-spec.md @@ -362,7 +362,7 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`). - `enclaves[].agent.maxModelTokens` → *(config-only; no CLI equivalent, see §14)* - `enclaves[].agent.github.cli` → *(config-only; deprecated closed legacy profile, see §14.3)* - `enclaves[].agent.tools.github` → *(config-only; closed GitHub MCP tool contract, see §14.3)* -- `enclaves[].dynamic` → *(config-only; no CLI equivalent; accepted but not executable in this release, see §14.1a)* +- `enclaves[].dynamic` → *(config-only; no CLI equivalent; requires compiler handoff; see §14.1a)* When `container.dockerHostPathPrefix` points at a daemon-visible shared `/tmp` path, the implementation stages the invoking CLI binary together with `/etc/passwd`, `/etc/group`, and the generated chroot `/etc/hosts` under that shared path so chroot mode can bootstrap on split-filesystem ARC/DinD hosts.