alvis
bedb527145
Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
770 lines
27 KiB
JSON
770 lines
27 KiB
JSON
{
|
|
// Internal maintainer inventory for `pnpm policy:config-coverage`.
|
|
// Keep this report-only by default: it helps policy maintainers notice config
|
|
// drift without making every config PR author update Policy.
|
|
"monitored": [
|
|
"auth.profiles.*.mode",
|
|
"auth.profiles.*.provider",
|
|
"browser.ssrfPolicy.allowPrivateNetwork",
|
|
"browser.ssrfPolicy.dangerouslyAllowPrivateNetwork",
|
|
"channels.*.accounts.*.dmPolicy",
|
|
"channels.*.accounts.*.groupPolicy",
|
|
"channels.*.accounts.*.groups.*.requireMention",
|
|
"channels.*.dmPolicy",
|
|
"channels.*.enabled",
|
|
"channels.*.groupPolicy",
|
|
"channels.*.groups.*.requireMention",
|
|
"diagnostics.otel.captureContent",
|
|
"gateway.auth.mode",
|
|
"gateway.auth.rateLimit.*",
|
|
"gateway.bind",
|
|
"gateway.controlUi.allowInsecureAuth",
|
|
"gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback",
|
|
"gateway.controlUi.dangerouslyDisableDeviceAuth",
|
|
"gateway.customBindHost",
|
|
"gateway.http.endpoints.*.*.allowUrl",
|
|
"gateway.http.endpoints.*.*.urlAllowlist.*",
|
|
"gateway.http.endpoints.*.enabled",
|
|
"gateway.mode",
|
|
"gateway.nodes.denyCommands.*",
|
|
"gateway.remote.enabled",
|
|
"gateway.tailscale.mode",
|
|
"gateway.tailscale.preserveFunnel",
|
|
"logging.redactSensitive",
|
|
"memory.qmd.sessions.enabled",
|
|
"mcp.servers.*.command",
|
|
"mcp.servers.*.transport",
|
|
"mcp.servers.*.url",
|
|
"models.providers.*.type",
|
|
"models.selected",
|
|
"models.selectedByAgent.*",
|
|
"models.selectedByChannel.*",
|
|
"session.dmScope",
|
|
"session.maintenance.mode",
|
|
"secrets.defaults.provider",
|
|
"secrets.providers.*.allowInsecureTransport",
|
|
"secrets.providers.*.source",
|
|
"tools.allow.*",
|
|
"tools.alsoAllow.*",
|
|
"tools.deny.*",
|
|
"tools.elevated.allowFrom.*.*",
|
|
"tools.elevated.enabled",
|
|
"tools.exec.ask",
|
|
"tools.exec.host",
|
|
"tools.exec.security",
|
|
"tools.fs.workspaceOnly",
|
|
"tools.profile",
|
|
"tools.sandbox.tools.allow.*",
|
|
"tools.sandbox.tools.alsoAllow.*",
|
|
"tools.sandbox.tools.deny.*",
|
|
"tools.web.fetch.ssrfPolicy.allowIpv6UniqueLocalRange",
|
|
"tools.web.fetch.ssrfPolicy.allowPrivateNetwork",
|
|
"tools.web.fetch.ssrfPolicy.allowRfc2544BenchmarkRange",
|
|
"tools.web.fetch.ssrfPolicy.dangerouslyAllowPrivateNetwork",
|
|
"agents.defaults.memorySearch.enabled",
|
|
"agents.defaults.memorySearch.experimental.sessionMemory",
|
|
"agents.defaults.memorySearch.sources.*",
|
|
"agents.defaults.model.fallbacks.*",
|
|
"agents.defaults.model.primary",
|
|
"agents.defaults.models.*.alias",
|
|
"agents.defaults.sandbox.backend",
|
|
"agents.defaults.sandbox.browser.binds.*",
|
|
"agents.defaults.sandbox.browser.cdpSourceRange",
|
|
"agents.defaults.sandbox.docker.apparmorProfile",
|
|
"agents.defaults.sandbox.docker.binds.*",
|
|
"agents.defaults.sandbox.docker.dangerouslyAllowContainerNamespaceJoin",
|
|
"agents.defaults.sandbox.docker.network",
|
|
"agents.defaults.sandbox.docker.readOnlyRoot",
|
|
"agents.defaults.sandbox.docker.seccompProfile",
|
|
"agents.defaults.sandbox.mode",
|
|
"agents.defaults.sandbox.workspaceAccess",
|
|
"agents.defaults.tools.allow.*",
|
|
"agents.defaults.tools.alsoAllow.*",
|
|
"agents.defaults.tools.deny.*",
|
|
"agents.defaults.tools.elevated.allowFrom.*.*",
|
|
"agents.defaults.tools.elevated.enabled",
|
|
"agents.defaults.tools.exec.ask",
|
|
"agents.defaults.tools.exec.host",
|
|
"agents.defaults.tools.exec.security",
|
|
"agents.defaults.tools.fs.workspaceOnly",
|
|
"agents.defaults.tools.profile",
|
|
"agents.defaults.tools.sandbox.tools.allow.*",
|
|
"agents.defaults.tools.sandbox.tools.alsoAllow.*",
|
|
"agents.defaults.tools.sandbox.tools.deny.*",
|
|
"agents.list.*.memorySearch.enabled",
|
|
"agents.list.*.memorySearch.experimental.sessionMemory",
|
|
"agents.list.*.memorySearch.sources.*",
|
|
"agents.list.*.model.fallbacks.*",
|
|
"agents.list.*.model.primary",
|
|
"agents.list.*.models.*.alias",
|
|
"agents.list.*.sandbox.backend",
|
|
"agents.list.*.sandbox.browser.binds.*",
|
|
"agents.list.*.sandbox.browser.cdpSourceRange",
|
|
"agents.list.*.sandbox.docker.apparmorProfile",
|
|
"agents.list.*.sandbox.docker.binds.*",
|
|
"agents.list.*.sandbox.docker.dangerouslyAllowContainerNamespaceJoin",
|
|
"agents.list.*.sandbox.docker.network",
|
|
"agents.list.*.sandbox.docker.readOnlyRoot",
|
|
"agents.list.*.sandbox.docker.seccompProfile",
|
|
"agents.list.*.sandbox.mode",
|
|
"agents.list.*.sandbox.workspaceAccess",
|
|
"agents.list.*.tools.allow.*",
|
|
"agents.list.*.tools.alsoAllow.*",
|
|
"agents.list.*.tools.deny.*",
|
|
"agents.list.*.tools.elevated.allowFrom.*.*",
|
|
"agents.list.*.tools.elevated.enabled",
|
|
"agents.list.*.tools.exec.ask",
|
|
"agents.list.*.tools.exec.host",
|
|
"agents.list.*.tools.exec.security",
|
|
"agents.list.*.tools.fs.workspaceOnly",
|
|
"agents.list.*.tools.profile",
|
|
"agents.list.*.tools.sandbox.tools.allow.*",
|
|
"agents.list.*.tools.sandbox.tools.alsoAllow.*",
|
|
"agents.list.*.tools.sandbox.tools.deny.*",
|
|
],
|
|
"classifications": [
|
|
{
|
|
"pattern": "browser.ssrfPolicy.dangerouslyAllowPrivateNetwork",
|
|
"status": "observed",
|
|
"area": "network",
|
|
"policy": "network.privateNetwork.allow",
|
|
"reason": "Policy observes private-network browser SSRF posture.",
|
|
},
|
|
{
|
|
"pattern": "browser.ssrfPolicy.allowPrivateNetwork",
|
|
"status": "observed",
|
|
"area": "network",
|
|
"policy": "network.privateNetwork.allow",
|
|
"reason": "Policy observes the legacy browser private-network toggle.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "tools.web.fetch.ssrfPolicy.dangerouslyAllowPrivateNetwork",
|
|
"status": "observed",
|
|
"area": "network",
|
|
"policy": "network.privateNetwork.allow",
|
|
"reason": "Policy observes private-network web-fetch SSRF posture.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "tools.web.fetch.ssrfPolicy.allowPrivateNetwork",
|
|
"status": "observed",
|
|
"area": "network",
|
|
"policy": "network.privateNetwork.allow",
|
|
"reason": "Policy observes the legacy web-fetch private-network toggle.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "tools.web.fetch.ssrfPolicy.allowRfc2544BenchmarkRange",
|
|
"status": "observed",
|
|
"area": "network",
|
|
"policy": "network.privateNetwork.allow",
|
|
"reason": "Policy treats RFC 2544 benchmark ranges as private-network posture.",
|
|
},
|
|
{
|
|
"pattern": "tools.web.fetch.ssrfPolicy.allowIpv6UniqueLocalRange",
|
|
"status": "observed",
|
|
"area": "network",
|
|
"policy": "network.privateNetwork.allow",
|
|
"reason": "Policy treats IPv6 unique-local ranges as private-network posture.",
|
|
},
|
|
{
|
|
"pattern": "session.dmScope",
|
|
"status": "observed",
|
|
"area": "ingress",
|
|
"policy": "ingress.session.requireDmScope",
|
|
"reason": "Policy observes direct-message session isolation scope.",
|
|
},
|
|
{
|
|
"pattern": "logging.redactSensitive",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.sensitiveLogging.requireRedaction",
|
|
"reason": "Policy observes sensitive log redaction posture.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "diagnostics.otel.captureContent",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.telemetry.denyContentCapture",
|
|
"reason": "Policy observes telemetry content-capture posture.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "session.maintenance.mode",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.retention.requireSessionMaintenance",
|
|
"reason": "Policy observes session maintenance enforcement posture.",
|
|
},
|
|
{
|
|
"pattern": "memory.qmd.sessions.enabled",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.memory.denySessionTranscriptIndexing",
|
|
"reason": "Policy observes QMD session-transcript indexing.",
|
|
},
|
|
{
|
|
"pattern": "agents.defaults.memorySearch.enabled",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.memory.denySessionTranscriptIndexing",
|
|
"reason": "Policy observes default memory-search session indexing enablement.",
|
|
},
|
|
{
|
|
"pattern": "agents.defaults.memorySearch.experimental.sessionMemory",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.memory.denySessionTranscriptIndexing",
|
|
"reason": "Policy observes default memory-search session-memory toggle.",
|
|
},
|
|
{
|
|
"pattern": "agents.defaults.memorySearch.sources.*",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.memory.denySessionTranscriptIndexing",
|
|
"reason": "Policy observes whether default memory-search sources include sessions.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.memorySearch.enabled",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.memory.denySessionTranscriptIndexing",
|
|
"reason": "Policy observes per-agent memory-search session indexing enablement.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.memorySearch.experimental.sessionMemory",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.memory.denySessionTranscriptIndexing",
|
|
"reason": "Policy observes per-agent memory-search session-memory toggle.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.memorySearch.sources.*",
|
|
"status": "observed",
|
|
"area": "dataHandling",
|
|
"policy": "dataHandling.memory.denySessionTranscriptIndexing",
|
|
"reason": "Policy observes whether per-agent memory-search sources include sessions.",
|
|
},
|
|
{
|
|
"pattern": "auth.profiles.*.mode",
|
|
"status": "observed",
|
|
"area": "auth",
|
|
"policy": "auth.profiles.allowModes",
|
|
"reason": "Policy observes configured auth profile mode metadata.",
|
|
},
|
|
{
|
|
"pattern": "auth.profiles.*.provider",
|
|
"status": "observed",
|
|
"area": "auth",
|
|
"policy": "auth.profiles.requireMetadata",
|
|
"reason": "Policy observes configured auth profile provider metadata.",
|
|
},
|
|
{
|
|
"pattern": "channels.*.enabled",
|
|
"status": "observed",
|
|
"area": "channels",
|
|
"policy": "channels.denyRules",
|
|
"reason": "Provider deny rules only apply to enabled configured channels.",
|
|
},
|
|
{
|
|
"pattern": "channels.*.accounts.*.dmPolicy",
|
|
"status": "observed",
|
|
"area": "ingress",
|
|
"policy": "ingress.channels.allowDmPolicies",
|
|
"reason": "Policy observes account-level direct-message access posture.",
|
|
},
|
|
{
|
|
"pattern": "channels.*.dmPolicy",
|
|
"status": "observed",
|
|
"area": "ingress",
|
|
"policy": "ingress.channels.allowDmPolicies",
|
|
"reason": "Policy observes channel-level direct-message access posture.",
|
|
},
|
|
{
|
|
"pattern": "channels.*.accounts.*.groupPolicy",
|
|
"status": "observed",
|
|
"area": "ingress",
|
|
"policy": "ingress.channels.denyOpenGroups",
|
|
"reason": "Policy observes account-level group access posture.",
|
|
},
|
|
{
|
|
"pattern": "channels.*.groupPolicy",
|
|
"status": "observed",
|
|
"area": "ingress",
|
|
"policy": "ingress.channels.denyOpenGroups",
|
|
"reason": "Policy observes channel-level group access posture.",
|
|
},
|
|
{
|
|
"pattern": "channels.*.accounts.*.groups.*.requireMention",
|
|
"status": "observed",
|
|
"area": "ingress",
|
|
"policy": "ingress.channels.requireMentionInGroups",
|
|
"reason": "Policy observes account group mention gates.",
|
|
},
|
|
{
|
|
"pattern": "channels.*.groups.*.requireMention",
|
|
"status": "observed",
|
|
"area": "ingress",
|
|
"policy": "ingress.channels.requireMentionInGroups",
|
|
"reason": "Policy observes channel group mention gates.",
|
|
},
|
|
{
|
|
"pattern": "gateway.bind",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.exposure.allowNonLoopbackBind",
|
|
"reason": "Policy observes Gateway bind exposure posture.",
|
|
},
|
|
{
|
|
"pattern": "gateway.customBindHost",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.exposure.allowNonLoopbackBind",
|
|
"reason": "Policy observes custom bind host exposure posture.",
|
|
},
|
|
{
|
|
"pattern": "gateway.tailscale.mode",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.exposure.allowTailscaleFunnel",
|
|
"reason": "Policy observes Tailscale serve/funnel mode when deriving Gateway exposure posture.",
|
|
},
|
|
{
|
|
"pattern": "gateway.tailscale.preserveFunnel",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.exposure.allowTailscaleFunnel",
|
|
"reason": "Policy observes preserveFunnel because serve mode can preserve Funnel exposure.",
|
|
},
|
|
{
|
|
"pattern": "gateway.auth.mode",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.auth.requireAuth",
|
|
"reason": "Policy observes Gateway auth mode posture.",
|
|
},
|
|
{
|
|
"pattern": "gateway.auth.rateLimit.*",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.auth.requireExplicitRateLimit",
|
|
"reason": "Policy observes whether Gateway auth rate limiting is explicitly configured.",
|
|
},
|
|
{
|
|
"pattern": "gateway.controlUi.allowInsecureAuth",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.controlUi.allowInsecure",
|
|
"reason": "Policy observes the Control UI insecure auth toggle.",
|
|
},
|
|
{
|
|
"pattern": "gateway.controlUi.dangerouslyDisableDeviceAuth",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.controlUi.allowInsecure",
|
|
"reason": "Policy observes the Control UI device-auth disable toggle.",
|
|
},
|
|
{
|
|
"pattern": "gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.controlUi.allowInsecure",
|
|
"reason": "Policy observes the Control UI Host-header origin fallback toggle.",
|
|
},
|
|
{
|
|
"pattern": "gateway.mode",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.remote.allow",
|
|
"reason": "Policy observes whether Gateway remote mode is enabled.",
|
|
},
|
|
{
|
|
"pattern": "gateway.remote.enabled",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.remote.allow",
|
|
"reason": "Policy observes explicit remote Gateway enablement.",
|
|
},
|
|
{
|
|
"pattern": "gateway.http.endpoints.*.enabled",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.http.denyEndpoints",
|
|
"reason": "Policy observes Gateway HTTP endpoint enablement.",
|
|
},
|
|
{
|
|
"pattern": "gateway.http.endpoints.*.*.allowUrl",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.http.requireUrlAllowlists",
|
|
"reason": "Policy observes URL-fetch enablement on Gateway HTTP inputs.",
|
|
},
|
|
{
|
|
"pattern": "gateway.http.endpoints.*.*.urlAllowlist.*",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.http.requireUrlAllowlists",
|
|
"reason": "Policy observes URL-fetch allowlists on Gateway HTTP inputs.",
|
|
},
|
|
{
|
|
"pattern": "gateway.nodes.denyCommands.*",
|
|
"status": "observed",
|
|
"area": "gateway",
|
|
"policy": "gateway.nodes.denyCommands",
|
|
"reason": "Policy observes denied node commands so privileged node command surfaces can be denied by policy.",
|
|
},
|
|
{
|
|
"pattern": "mcp.servers.*.command",
|
|
"status": "observed",
|
|
"area": "mcp",
|
|
"policy": "mcp.servers.allow / mcp.servers.deny",
|
|
"reason": "Policy observes configured MCP server ids and command posture context.",
|
|
},
|
|
{
|
|
"pattern": "mcp.servers.*.transport",
|
|
"status": "observed",
|
|
"area": "mcp",
|
|
"policy": "mcp.servers.allow / mcp.servers.deny",
|
|
"reason": "Policy observes configured MCP server transport posture context.",
|
|
},
|
|
{
|
|
"pattern": "mcp.servers.*.url",
|
|
"status": "observed",
|
|
"area": "mcp",
|
|
"policy": "mcp.servers.allow / mcp.servers.deny",
|
|
"reason": "Policy observes configured MCP server URL posture context.",
|
|
},
|
|
{
|
|
"pattern": "models.providers.*.type",
|
|
"status": "observed",
|
|
"area": "models",
|
|
"policy": "models.providers.allow / models.providers.deny",
|
|
"reason": "Policy observes configured provider ids.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "models.selected",
|
|
"status": "observed",
|
|
"area": "models",
|
|
"policy": "models.providers.allow / models.providers.deny",
|
|
"reason": "Policy observes selected model refs.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "models.selectedByAgent.*",
|
|
"status": "observed",
|
|
"area": "models",
|
|
"policy": "models.providers.allow / models.providers.deny",
|
|
"reason": "Policy observes agent-specific selected model refs.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "models.selectedByChannel.*",
|
|
"status": "observed",
|
|
"area": "models",
|
|
"policy": "models.providers.allow / models.providers.deny",
|
|
"reason": "Policy observes channel-specific selected model refs.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "agents.defaults.model.**",
|
|
"status": "observed",
|
|
"area": "models",
|
|
"policy": "models.providers.allow / models.providers.deny",
|
|
"reason": "Policy observes default agent model refs.",
|
|
},
|
|
{
|
|
"pattern": "agents.defaults.models.*.alias",
|
|
"status": "observed",
|
|
"area": "models",
|
|
"policy": "models.providers.allow / models.providers.deny",
|
|
"reason": "Policy observes default agent model aliases.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.model.**",
|
|
"status": "observed",
|
|
"area": "models",
|
|
"policy": "models.providers.allow / models.providers.deny",
|
|
"reason": "Policy observes per-agent model refs.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.models.*.alias",
|
|
"status": "observed",
|
|
"area": "models",
|
|
"policy": "models.providers.allow / models.providers.deny",
|
|
"reason": "Policy observes per-agent model aliases.",
|
|
},
|
|
{
|
|
"pattern": "secrets.defaults.provider",
|
|
"status": "observed",
|
|
"area": "secrets",
|
|
"policy": "secrets.requireManagedProviders",
|
|
"reason": "Policy observes default SecretRef provider provenance.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "secrets.providers.*.source",
|
|
"status": "observed",
|
|
"area": "secrets",
|
|
"policy": "secrets.denySources",
|
|
"reason": "Policy observes configured secret provider source type.",
|
|
},
|
|
{
|
|
"pattern": "secrets.providers.*.allowInsecureTransport",
|
|
"status": "observed",
|
|
"area": "secrets",
|
|
"policy": "secrets.allowInsecureProviders",
|
|
"reason": "Policy observes insecure secret-provider transport posture.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "tools.profile",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.profiles.allow",
|
|
"reason": "Policy observes global tool profile posture.",
|
|
},
|
|
{
|
|
"pattern": "tools.fs.workspaceOnly",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.fs.requireWorkspaceOnly",
|
|
"reason": "Policy observes global filesystem workspace-only posture.",
|
|
},
|
|
{
|
|
"pattern": "tools.exec.security",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.exec.allowSecurity",
|
|
"reason": "Policy observes global exec security posture.",
|
|
},
|
|
{
|
|
"pattern": "tools.exec.ask",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.exec.requireAsk",
|
|
"reason": "Policy observes global exec approval posture.",
|
|
},
|
|
{
|
|
"pattern": "tools.exec.host",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.exec.allowHosts",
|
|
"reason": "Policy observes global exec host routing posture.",
|
|
},
|
|
{
|
|
"pattern": "tools.elevated.enabled",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.elevated.allow",
|
|
"reason": "Policy observes global elevated tool posture.",
|
|
},
|
|
{
|
|
"pattern": "tools.elevated.allowFrom.*.*",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.elevated.allow",
|
|
"reason": "Policy observes global elevated provider allowlists.",
|
|
},
|
|
{
|
|
"pattern": "tools.allow.*",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tool posture evidence",
|
|
"reason": "Policy includes global tool allow posture in evidence for attestation drift.",
|
|
},
|
|
{
|
|
"pattern": "tools.alsoAllow.*",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.alsoAllow.expected",
|
|
"reason": "Policy observes global tools.alsoAllow posture.",
|
|
},
|
|
{
|
|
"pattern": "tools.deny.*",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.denyTools",
|
|
"reason": "Policy observes global tool deny posture.",
|
|
},
|
|
{
|
|
"pattern": "tools.sandbox.tools.*.*",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.denyTools",
|
|
"reason": "Policy observes global sandbox tool posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.tools.**",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.* scoped by agentIds",
|
|
"reason": "Policy observes default and per-agent tool posture overrides.",
|
|
"allowNoSchemaPath": true,
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.tools.**",
|
|
"status": "observed",
|
|
"area": "tools",
|
|
"policy": "tools.* scoped by agentIds",
|
|
"reason": "Policy observes per-agent tool posture overrides.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.mode",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.requireMode",
|
|
"reason": "Policy observes sandbox mode posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.mode",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.requireMode",
|
|
"reason": "Policy observes per-agent sandbox mode posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.backend",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.allowBackends",
|
|
"reason": "Policy observes sandbox backend posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.backend",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.allowBackends",
|
|
"reason": "Policy observes per-agent sandbox backend posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.workspaceAccess",
|
|
"status": "observed",
|
|
"area": "agents",
|
|
"policy": "agents.workspace.allowedAccess",
|
|
"reason": "Policy observes sandbox workspace access posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.workspaceAccess",
|
|
"status": "observed",
|
|
"area": "agents",
|
|
"policy": "agents.workspace.allowedAccess",
|
|
"reason": "Policy observes per-agent sandbox workspace access posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.docker.network",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.denyHostNetwork and sandbox.containers.denyContainerNamespaceJoin",
|
|
"reason": "Policy observes Docker container network posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.docker.network",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.denyHostNetwork and sandbox.containers.denyContainerNamespaceJoin",
|
|
"reason": "Policy observes per-agent Docker container network posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.docker.binds.*",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.requireReadOnlyMounts and sandbox.containers.denyContainerRuntimeSocketMounts",
|
|
"reason": "Policy observes Docker bind mount posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.docker.binds.*",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.requireReadOnlyMounts and sandbox.containers.denyContainerRuntimeSocketMounts",
|
|
"reason": "Policy observes per-agent Docker bind mount posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.browser.binds.*",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.requireReadOnlyMounts",
|
|
"reason": "Policy observes sandbox browser bind mount posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.browser.binds.*",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.requireReadOnlyMounts",
|
|
"reason": "Policy observes per-agent sandbox browser bind mount posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.docker.apparmorProfile",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.denyUnconfinedProfiles",
|
|
"reason": "Policy observes Docker AppArmor profile posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.docker.apparmorProfile",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.denyUnconfinedProfiles",
|
|
"reason": "Policy observes per-agent Docker AppArmor profile posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.docker.seccompProfile",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.denyUnconfinedProfiles",
|
|
"reason": "Policy observes Docker seccomp profile posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.docker.seccompProfile",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.denyUnconfinedProfiles",
|
|
"reason": "Policy observes per-agent Docker seccomp profile posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.docker.dangerouslyAllowContainerNamespaceJoin",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.denyContainerNamespaceJoin",
|
|
"reason": "Policy observes explicit Docker namespace-join escape posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.docker.dangerouslyAllowContainerNamespaceJoin",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.denyContainerNamespaceJoin",
|
|
"reason": "Policy observes explicit per-agent Docker namespace-join escape posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.docker.readOnlyRoot",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.requireReadOnlyMounts",
|
|
"reason": "Policy observes Docker read-only root posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.docker.readOnlyRoot",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.containers.requireReadOnlyMounts",
|
|
"reason": "Policy observes per-agent Docker read-only root posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.*.sandbox.browser.cdpSourceRange",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.browser.requireCdpSourceRange",
|
|
"reason": "Policy observes sandbox browser CDP source range posture.",
|
|
},
|
|
{
|
|
"pattern": "agents.list.*.sandbox.browser.cdpSourceRange",
|
|
"status": "observed",
|
|
"area": "sandbox",
|
|
"policy": "sandbox.browser.requireCdpSourceRange",
|
|
"reason": "Policy observes per-agent sandbox browser CDP source range posture.",
|
|
},
|
|
],
|
|
}
|