feat(security): gate AI-agent artifact installation - #129

Draft

seonghobae wants to merge 251 commits into

mainfrom

feat/agent-artifact-admission

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 28, 2026

test(security): format red admission contract
seonghobae
committed
77c1309
feat(security): add agent artifact admission crate
codex
committed
1a5d2c7
feat(security): harden agent artifact admission policy
codex
committed
30df4f9

Commits on Aug 29, 2026

test(security): lock admission audit durability contract
seonghobae
committed
b82edf2
feat(security): add minimized admission audit sinks
seonghobae
committed
68a3ae3
feat(security): enable production audit serialization
seonghobae
committed
8ae3f66
feat(security): expose append-only audit contract
seonghobae
committed
b495bd9
test(security): lock admission config and credential contract
seonghobae
committed
94483e1
feat(security): add strict admission config loading
seonghobae
committed
497fe08
feat(security): expose strict admission configuration
seonghobae
committed
cb79089
fix(ci): format strict admission configuration
seonghobae
committed
5f7f61c
fix(ci): format admission config contract tests
seonghobae
committed
45e41f2
feat(security): add deny-all admission deployment example
seonghobae
committed
5f41e1e
feat(security): publish admission credential schema
seonghobae
committed
afc535c
test(security): define authenticated admission API contract
seonghobae
committed
6405a99
feat(security): expose authenticated artifact admission service
seonghobae
committed
2e882b7
chore(lock): refresh admission service dependencies
github-actions[bot]
committed
38a37be
chore(ci): format admission service exact head
seonghobae
committed
34f6305
style(rust): format admission service
github-actions[bot]
committed
07be0ab
fix(security): remove deprecated token compare
codex
committed
6eea129

Commits on Sep 1, 2026

test(ddd): enforce agent admission dependency direction
seonghobae
committed
485ab06
docs(ddd): define agent admission bounded context
seonghobae
committed
e28756a
docs(adr): record agent admission bounded context
seonghobae
committed
60a356b
docs(api): publish agent admission OpenAPI contract
seonghobae
committed
f5c69bc
refactor(ddd): name admission domain explicitly
seonghobae
committed
a24ecec
docs(ddd): align context map with admission module name
seonghobae
committed
d31043d
docs(ddd): align ADR with admission module name
seonghobae
committed
4ce8a59
test(admission): require audit evidence for oversized authenticated requests
seonghobae
committed
c9c51ab
feat(admission): classify oversized request bodies
seonghobae
committed
3654297
feat(audit): record authenticated body-limit rejection
seonghobae
committed
5d19199
refactor(audit): expose request rejection evidence builder
seonghobae
committed
416fce1
fix(admission): audit body-limit rejection before response
seonghobae
committed
b97e557
test(admission): remove obsolete unaudited body-limit expectation
seonghobae
committed
a0275e1
docs(api): document audited body-limit rejection
seonghobae
committed
ac991b9
docs(security): model agent artifact admission threats
seonghobae
committed
225ff0c
docs(ops): add artifact admission runbook
seonghobae
committed
af30a71
docs(research): trace artifact admission standards
seonghobae
committed
ee495f4
merge(main): converge agent artifact admission with protected head
seonghobae
committed
3b1f1f1
style(admission): apply rustfmt to HTTP boundary
seonghobae
committed
e54e886
style(admission): format DDD fitness test
seonghobae
committed
ba0082f
style(admission): format oversized-request contract
seonghobae
committed
3a23772
merge: synchronize agent artifact admission with protected main
seonghobae
committed
704e222

Commits on Sep 2, 2026

test(admission): reject alternate install roots
seonghobae
committed
e0a4ea0
feat(admission): classify alternate install roots
seonghobae
committed
155335f
fix(admission): block alternate install roots
seonghobae
committed
96badfa
docs(admission): publish alternate-root denial
seonghobae
committed
ad049ea
docs(admission): record install-root escape threat
seonghobae
committed
ff68d4f
test(admission): cover package-manager root escapes
seonghobae
committed
03ee834
test(admission): reject uv and Cargo root overrides
seonghobae
committed
9ce6c8f
test(admission): reject npm safety-flag override
seonghobae
committed
f39846f
fix(admission): reject conflicting script safety flags
seonghobae
committed
e220b49
test(admission): cover npm negated safety flag
seonghobae
committed
0cd8fa5
docs(admission): trace npm safety-flag precedence
seonghobae
committed
54e882f
test(admission): reject attached pip trust/root flags
seonghobae
committed
1df4a2a
fix(admission): reject attached short trust/root flags
seonghobae
committed
02125ad
docs(admission): trace pip trust and install-root controls
seonghobae
committed
ffe89e3
test(admission): reject uv index trust-root overrides
seonghobae
committed
5ea6b47
fix(admission): block uv and cargo destination overrides
seonghobae
committed
7368cc0
docs(admission): trace uv and cargo override controls
seonghobae
committed
cb80062
test(admission): reject Cargo source overrides
seonghobae
committed
a9ec111
fix(admission): reject Cargo git and path sources
seonghobae
committed
5c1725d
docs(admission): trace Cargo source selectors
seonghobae
committed
a216aa1
docs(changelog): record agent artifact admission controls
seonghobae
committed
73fa6a4
docs(threat-model): define package source and digest boundary
seonghobae
committed
3875e00
docs(runbook): require post-admission artifact byte verification
seonghobae
committed
79e8da0
test(admission): reject npm workspace scope expansion
seonghobae
committed
148f691
fix(admission): reject npm workspace scope overrides
seonghobae
committed
2dd93c0
docs(admission): trace npm workspace scope control
seonghobae
committed
7c01c2d
docs(admission): model npm workspace scope escape
seonghobae
committed
52a77b9
docs(changelog): record npm workspace admission hardening
seonghobae
committed
bba4a18
test(admission): cover npm workspace short alias
seonghobae
committed
f3c05de
fix(admission): reject npm -w workspace selector
seonghobae
committed
1ea226d
test(admission): reject undeclared install operands
seonghobae
committed
2ea7391
fix(admission): bind argv operands to reviewed artifacts
seonghobae
committed
0d8b7e2
test(admission): keep hitchhike regression focused
seonghobae
committed
d64976d
test(admission): reject indirect package sources
seonghobae
committed
51d91d5
test(admission): cover attached indirect sources
seonghobae
committed
e552672
fix(admission): reject indirect artifact sources
seonghobae
committed
838e194
test(admission): reject cross-ecosystem package manager reuse
seonghobae
committed
fcf0a58
fix(admission): bind artifacts to package-manager ecosystem
seonghobae
committed
05dd7ab
test(admission): preserve same-ecosystem cargo install
seonghobae
committed
c10e6dd
docs(admission): trace package-manager ecosystem binding
seonghobae
committed
7c38f25
docs(changelog): record ecosystem-bound artifact admission
seonghobae
committed
b3d0831
test(security): reject Yarn workspace-root escape flags
seonghobae
committed
080997c
fix(security): block Yarn workspace-root scope escape
seonghobae
committed
0a4f20d
docs(security): trace Yarn workspace-root rejection
seonghobae
committed
a2d7043
docs(changelog): record Yarn workspace-scope hardening
seonghobae
committed
350156b
test(admission): reject Bun scope and config escapes
seonghobae
committed
a5a80c7
fix(admission): fail closed on Bun scope overrides
seonghobae
committed
fdb75c2
test(admission): cover Bun flag aliases and split forms
seonghobae
committed
23863f0
fix(admission): reject Bun filter alias
seonghobae
committed
60279df
docs(admission): trace Bun scope and config controls
seonghobae
committed
fa22c4b
docs(changelog): record Bun admission hardening
seonghobae
committed
86abdb9
test(admission): keep Bun argv construction explicit
seonghobae
committed
4383730
test(admission): reject pnpm directory escape flags
seonghobae
committed
842f84d
fix(admission): block pnpm workspace directory overrides
seonghobae
committed
8fbd709
docs(changelog): record pnpm directory fail-closed policy
seonghobae
committed
eec758b
docs(security): trace pnpm directory authority
seonghobae
committed
2281586
test(admission): reject pnpm workspace selectors
seonghobae
committed
875ec62
fix(admission): block pnpm workspace scope overrides
seonghobae
committed
31d2600
docs(changelog): record pnpm workspace-scope controls
seonghobae
committed
5f71cd5
docs(security): trace pnpm workspace selectors
seonghobae
committed
538c905
test(admission): reject pnpm dotted config authority
seonghobae
committed
f3c03b3
fix(admission): reject pnpm dotted config authority
seonghobae
committed
8f205a6
docs(changelog): record pnpm config-override hardening
seonghobae
committed
80230be
docs(security): model pnpm dotted-config authority
seonghobae
committed
6d0823c
docs(security): trace pnpm dotted configuration authority
seonghobae
committed
eb6523a
test(admission): reject npm config-file trust overrides
seonghobae
committed
25be946
fix(admission): block npm config-file trust overrides
seonghobae
committed
c63f27b
docs(changelog): record npm config-file admission hardening
seonghobae
committed
97399d5
docs(security): trace npm config-file authority boundary
seonghobae
committed
7160f38
test(admission): reject npm TLS trust overrides
seonghobae
committed
f9b0453
fix(admission): block npm TLS trust overrides
seonghobae
committed
8be683a
docs(changelog): record npm TLS trust hardening
seonghobae
committed
8edd045
docs(security): trace npm TLS trust authority boundary
seonghobae
committed
217108b
test(admission): reject cargo target-dir escape
seonghobae
committed
609cbde
fix(admission): block Cargo target-dir escape
seonghobae
committed
2545b75

Commits on Sep 3, 2026

test(admission): reject unreviewed Cargo build variants
seonghobae
committed
02ede7e
fix(admission): bind Cargo install build variants
seonghobae
committed
32d9609
docs(security): bind Cargo install build variants
seonghobae
committed
66b7eb6
test: reproduce pnpmfile execution escape
seonghobae
committed
3aaba99
fix: suppress pnpmfile execution during admission
seonghobae
committed
d994e64
docs: trace pnpmfile execution boundary
seonghobae
committed
cfbe3b8
docs: record pnpmfile admission hardening
seonghobae
committed
85f0f65
test(security): reject option terminator safety bypass
seonghobae
committed
46363d7
fix(security): reject argv parser terminators
seonghobae
committed
0ccab11
docs(security): trace option parser authority boundary
seonghobae
committed
46772dd
docs(changelog): record argv parser hardening
seonghobae
committed
e10227f
test(admission): block Bun trust authority expansion
seonghobae
committed
e88429e
fix(admission): reject Bun trust authority mutation
seonghobae
committed
8f7c477
docs(security): trace Bun trust authority boundary
seonghobae
committed
2825de8
docs(changelog): record Bun trust hardening
seonghobae
committed
b19e19f
test(admission): reject Bun integrity bypass
seonghobae
committed
af3341e
fix(admission): preserve Bun integrity verification
seonghobae
committed
26eca37
docs(security): trace Bun integrity bypass boundary
seonghobae
committed
2df626e
docs(changelog): record Bun integrity verification guard
seonghobae
committed
b90fd58
test(security): reject caller-selected OCI platform variants
seonghobae
committed
8310066
fix(security): fail closed on OCI platform selection
seonghobae
committed
17ca3b9
fix(security): bind OCI platform choice to artifact policy
seonghobae
committed
b84a30c
test(architecture): keep artifact variant policy in domain
seonghobae
committed
890aba0
docs(security): trace OCI platform artifact identity boundary
seonghobae
committed
8d3663d
test(security): cover OCI platform guard branches
seonghobae
committed
75f003e
test(security): reject Podman OCI selector aliases
seonghobae
committed
e24f8ea
fix(security): bind Podman OCI selector aliases
seonghobae
committed
950e105
docs(security): trace Podman OCI selector authority
seonghobae
committed
09a2e50
docs(changelog): record OCI selector alias hardening
seonghobae
committed
857da84
test(security): reject Podman registry TLS trust overrides
seonghobae
committed
186be29
test(security): cover Podman TLS false spellings
seonghobae
committed
7725ae8
feat(security): classify Podman registry TLS trust overrides
seonghobae
committed
b7b13e5
fix(security): fail closed on Podman registry TLS overrides
seonghobae
committed
c4cb573
test(architecture): keep OCI trust policy in domain boundary
seonghobae
committed
7c833b6
docs(security): trace OCI registry TLS trust authority
seonghobae
committed
d45cb23
docs(changelog): record OCI registry TLS hardening
seonghobae
committed
de69e71

Commits on Sep 4, 2026

test(security): reject OCI repository-wide pull expansion
seonghobae
committed
d7f429c
fix(security): bind OCI pulls to exact artifact set
seonghobae
committed
7f06137
docs(security): record exact-set OCI pull invariant
seonghobae
committed
37751af
docs(security): trace OCI pull cardinality authority
seonghobae
committed
3a63247
test(admission): cover assigned OCI all-tags forms
seonghobae
committed
883d1d3
fix(admission): block assigned OCI all-tags expansion
seonghobae
committed
e9e07e6
test(admission): cover OCI all-tags boolean assignments
seonghobae
committed
2207a6f
docs(admission): trace assigned OCI all-tags repair
seonghobae
committed
6dfd777
test(security): reject bundled OCI all-tags shorthands
seonghobae
committed
a1105c5
fix(security): parse bundled OCI all-tags shorthand
seonghobae
committed
f35db9e
test(security): preserve quiet-only OCI pulls
seonghobae
committed
897a790
docs(security): trace bundled OCI shorthand authority
seonghobae
committed
5b7fd58
docs(changelog): record OCI shorthand hardening
seonghobae
committed
f75817e
test(security): cover assigned OCI shorthand bundles
seonghobae
committed
dd6b930
fix(security): honor assigned OCI shorthand semantics
seonghobae
committed
0f6a02a
docs(security): trace assigned OCI shorthand semantics
seonghobae
committed
578e493
docs(changelog): record assigned OCI shorthand semantics
seonghobae
committed
7309878
test(admission): reject caller-selected OCI registry credentials
seonghobae
committed
400c532
fix(admission): deny OCI registry credential overrides
seonghobae
committed
3eade5d
docs(security): trace OCI registry authentication authority
seonghobae
committed
bd9d210
docs(changelog): record OCI registry auth admission hardening
seonghobae
committed
d944a30
test(admission): reject caller-selected OCI decryption keys
seonghobae
committed
d7aa94f
fix(admission): deny caller-selected OCI decryption keys
seonghobae
committed
261ecc2
docs(security): trace OCI decryption authority boundary
seonghobae
committed
841abfd
docs(changelog): record OCI decryption authority hardening
seonghobae
committed
32c748e
docs(threat-model): bind OCI decryption and registry credential authority
seonghobae
committed
c2ac4c2
test(admission): reject caller-selected PyPI artifact variants
seonghobae
committed
9f11a7f
fix(admission): bind PyPI artifact and build variants
seonghobae
committed
a23583a
refactor(admission): use generic artifact variant guard
seonghobae
committed
b333670
docs(changelog): record PyPI variant admission
seonghobae
committed
bab0f8b
docs(doctoring): trace PyPI artifact variant authority
seonghobae
committed
f501261
test(admission): reject attached pip build settings
seonghobae
committed
aaecfe6
fix(admission): reject attached pip config settings
seonghobae
committed
c8546f4
docs(doctoring): record attached pip config parsing
seonghobae
committed
462d984
test(admission): reject unbound uv artifact variants
seonghobae
committed
2b78613
fix(admission): bind uv pip artifact variants
seonghobae
committed
c655cbc
test(admission): reject unreviewed PyPI dependency expansion
seonghobae
committed
5522439
fix(admission): model exact PyPI dependency cardinality
seonghobae
committed
3069570
fix(admission): enforce exact PyPI dependency set
seonghobae
committed
3eb2a32
test(admission): keep exact PyPI positives dependency-bounded
seonghobae
committed
28333cd
docs(admission): trace uv and dependency cardinality controls
seonghobae
committed
ad52a44
docs(security): bind PyPI resolver authority
seonghobae
committed
c83e235
docs(changelog): record exact PyPI dependency admission
seonghobae
committed
f25e20b
test(admission): bind Cargo version identity
seonghobae
committed
4484acd
test(admission): align Cargo identity reason
seonghobae
committed
de5bc32
fix(admission): bind Cargo version identity
seonghobae
committed
a193266
style(admission): format Cargo selector guard
seonghobae
committed
d268908
docs(admission): trace Cargo version authority
seonghobae
committed
aa24fb9
test(admission): isolate Cargo version selector
seonghobae
committed
6fe642f
test(admission): reject Cargo overwrite authority
seonghobae
committed
4c5883d
fix(admission): classify Cargo overwrite authority
seonghobae
committed
76823b8
fix(admission): fail closed on Cargo overwrite authority
seonghobae
committed
c35f646
docs(security): trace Cargo overwrite authority
seonghobae
committed
46fae7c
docs(changelog): record Cargo overwrite guard
seonghobae
committed
a13afe2
docs(security): model Cargo overwrite authority
seonghobae
committed
213987c
test(admission): cover Cargo mutation flag variants
seonghobae
committed
4cfdaf9
test(admission): reject npm package-spec source substitution
seonghobae
committed
7caadbb
test(admission): reject PyPI direct-source substitution
seonghobae
committed
551101f
feat(admission): bind package operand to reviewed source identity
seonghobae
committed
ec72427
fix(admission): reject package operand source substitution
seonghobae
committed
13cd6dd
fix(config): fail closed on package source-coordinate drift
seonghobae
committed
dcf5c9e
docs(security): bind package specs to reviewed source identity
seonghobae
committed
3b47849
docs(changelog): record package source-coordinate binding
seonghobae
committed
e4def8f
test(architecture): include artifact source identity domain module
seonghobae
committed
66e3173
test(admission): expose npm transitive dependency widening
seonghobae
committed
debcc26
fix(admission): fail closed on npm resolver widening
seonghobae
committed
395bfe7
fix(admission): reject unreviewed npm dependency closure
seonghobae
committed
b7ae0d8
test(admission): bind npm closure failure to artifact authority
seonghobae
committed
a2dc368
test(admission): keep exact allow on non-resolving package path
seonghobae
committed
afc1268
test(admission): keep audited allow on cargo path
seonghobae
committed
f3a3bea
test(admission): separate pnpm hook hardening from closure authority
seonghobae
committed
d5a5c4a
test(admission): keep npm source identity distinct from closure approval
seonghobae
committed
26abebb
docs(admission): record npm-family dependency-closure boundary
seonghobae
committed
c19aadc
docs(admission): operationalize npm dependency-closure denial
seonghobae
committed
1f4cc25
docs(admission): model npm transitive resolver authority
seonghobae
committed
55e8952
docs(admission): trace npm-family dependency-closure decision
seonghobae
committed
96f5f28
test(security): reject disabling PyPI hash checking
seonghobae
committed
032d74e
fix(security): identify disabled pip hash requirement
seonghobae
committed
4c0de8a
fix(security): fail closed on disabled pip hash checking
seonghobae
committed
bba656c
docs(security): record pip hash-mode denial
seonghobae
committed
a93f7e7
docs(doctoring): trace PyPI hash-mode authority
seonghobae
committed
3f3da03
chore: integrate protected main into artifact admission
seonghobae
committed
f688907

Commits on Sep 5, 2026

style(admission): apply rustfmt to crate facade
seonghobae
committed
a618bd3
style(admission): apply rustfmt to intent model
seonghobae
committed
2397960
style(admission): apply rustfmt to artifact variant guards
seonghobae
committed
266b213
style(admission): apply rustfmt to security contract tests
seonghobae
committed
e050c94
style(admission): format Bun and DDD contracts
seonghobae
committed
d34abc3
style(admission): format npm security contracts
seonghobae
committed
6ea20f5
style(admission): format pnpm and PyPI contracts
seonghobae
committed
45d14cd
style(admission): format indirect artifact source tests
seonghobae
committed
f46b068
style(admission): format npm source identity test
seonghobae
committed
24a5748
style(admission): format PyPI source identity test
seonghobae
committed
379e6e1
style(admission): format pnpm scope test
seonghobae
committed
750da52
style(admission): format Yarn workspace test
seonghobae
committed
16486a8
style(admission): format install root contract
seonghobae
committed
402cfe2
style(admission): complete rustfmt repair
seonghobae
committed
db921e7

Commits on Sep 6, 2026

merge(main): adopt protected anti-bot boundary into artifact admission
seonghobae
committed
14c0af3