feat(hitl): approval binds to the resolved request, not the tool name - #627

Merged

ginccc merged 40 commits into

mainfrom

feat/operator-request-fingerprint

Aug 7, 2026

Commits on Aug 2, 2026

feat(apicalls): resolve an ApiCall to its request without sending it
ginccc
committed
f36a90e
feat(hitl): pin the resolved request to a gated tool call at gate time
ginccc
committed
0140735
feat(hitl): refuse an approved call whose request changed since approval
ginccc
committed
367c3b0

Commits on Aug 3, 2026

feat(hitl): emit eddi.operator.write.approval per gated-call decision
ginccc
committed
eecbe54
feat(operator): a relay endpoint for the canary and gate-verified metrics
ginccc
committed
3460620
docs(hitl): document request pinning and the new operator metrics
ginccc
committed
6f07b3d
feat(hitl): surface the resolved-request preview through approval-status
ginccc
committed
1aedc28
docs(hitl): document request-preview exposure and write-approval metrics
ginccc
committed
39151f3
fix(hitl): redact the request body, not only the headers
ginccc
committed
96df3c8
fix(hitl): pinning silently did not apply to calls with query parameters
ginccc
committed
b0fe5cf
fix(hitl): redact query parameters in the persisted debug record too
ginccc
committed
d16e821
refactor(hitl): key the request map by IRequest.KEY_* rather than string literals
ginccc
committed
f826160
fix(operator): say 'body is required' for a null canary report
ginccc
committed
050f225
fix(hitl): stop logging raw tool arguments on a parse failure
ginccc
committed
aed6c9c
fix(hitl): omit the throwable from request-resolution WARNs
ginccc
committed
32ce1ec
fix(hitl): stop logging the request-build failure message in resolve()
ginccc
committed
de4e23e
fix(hitl): sanitize the ApiCall name, and stop KEY_HEADERS overstating its type
ginccc
committed
189458d
refactor(hitl): let resolve() throw without logging, and log at the caller
ginccc
committed
e4ff54a
refactor(hitl): drop the scrubSensitiveHeaders wrapper, which no longer scrubs only headers
ginccc
committed
40b0151
fix(ci): drop the entropy from the redaction tests' fake keys
ginccc
committed
9a73de8
docs(planning): correct the stale approvals.tsx note
ginccc
committed
2eb8607
feat(setup): let the standard agent-setup path install a HITL gate too
ginccc
committed
10ed90e
fix(hitl): reattach auditOutcomeUnknown's Javadoc to its method
ginccc
committed
b298be3
fix(hitl): fail closed on a resume verdict that resolved to null
ginccc
committed
e1704b8
fix(hitl): de-duplicate the resumeConversation verdict-guard comment
ginccc
committed
9201dc9
fix(hitl): redact the request URI — the one field that never was
ginccc
committed
1de2aca
fix(hitl): stop the request fingerprint leaking through detail=full
ginccc
committed
9748a8f
fix(hitl): scan header values by shape, like the body and query already do
ginccc
committed
6632cfe
fix(hitl): close the two fail-opens in the pinning divergence check
ginccc
committed
f1ab92b
test(hitl): prove the refusal APPLIES, not just that it computes
ginccc
committed
0605254
fix(hitl): sanitize model-chosen tool arguments before they reach the log
ginccc
committed
85b888b
fix(hitl): two regressions in the redaction/strip commits, found on review
ginccc
committed
8f25aee

Commits on Aug 4, 2026