Skip to content

Make shell policy evidence executable - #1919

Merged
Aaronontheweb merged 1 commit into
devfrom
docs/shell-policy-pipeline
Aug 13, 2026
Merged

Make shell policy evidence executable#1919
Aaronontheweb merged 1 commit into
devfrom
docs/shell-policy-pipeline

Conversation

@Aaronontheweb

Copy link
Copy Markdown
Collaborator

Summary

  • execute the exact sanitized D02, D03, D07-D11, D14, D17, and D18 policy fixtures through the real shell matcher and coordinator
  • validate parser value facts and structured path-policy routing independently from policy candidate identity
  • deserialize the strict fixture schema with source-generated System.Text.Json metadata and reject unknown members
  • update the operator guide with current prompt, session-grant, headless, trace, loop, and compound-command behavior
  • preserve the interactive-only reviewed-safe authority contract from Fix headless reviewed-safe authority #1918

Validation

  • dotnet build Netclaw.slnx -c Release --no-restore -v:q — 0 warnings/errors
  • Security evidence contract: 13/13
  • Actor fixture plus approval matrix: 258/258
  • openspec validate structure-shell-approval-policy --strict
  • pwsh ./scripts/Add-FileHeaders.ps1 -Verify
  • git diff upstream/dev --check
  • adversarial review: PASS, no warnings
  • repository Slopwatch reports only pre-existing SW004 in untouched PowerShellHostProbeTests.cs:279 (blame 868204947)

@Aaronontheweb
Aaronontheweb enabled auto-merge (squash) August 13, 2026 09:36
=> string.Join(
'|',
row.Stage,
row.CandidateId?.Value.ToString(CultureInfo.InvariantCulture) ?? string.Empty,
Comment on lines +217 to +220
=> Path.Combine(
AppContext.BaseDirectory,
"ApprovalEvidence",
"netclaw-policy-fixtures.json");
@Aaronontheweb
Aaronontheweb merged commit 1b310cd into dev Aug 13, 2026
23 checks passed
@Aaronontheweb
Aaronontheweb deleted the docs/shell-policy-pipeline branch August 13, 2026 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant