Repository navigation

feat: enforce Cloud-managed Jev and hybrid policies, scoped to agents - #873

Open

chhhee10 wants to merge 39 commits into

mainfrom

feat/cloud-jev-policies

Commits on Oct 2, 2026

daemon: materialise Cloud Jev policies and report policy errors

chhhee10
and
claude
committed
2b322d5
cli: Cloud Jev policies, Cloud Jev mode, and errors.json

chhhee10
and
claude
committed
4dbb60d
fp: publish Jev/both policies, deploy --jev-mode, show policy errors

chhhee10
and
claude
committed
aa6f4e4
daemon: a disconnect sticks; transport blips and local paths stay off the report

chhhee10
and
claude
committed
8bc2a91
cli: bind a both policy to its own Jev half, Cloud-first budget, reports without paths

chhhee10
and
claude
committed
6533bde
fp: `fleet jev-mode`, mode-only deploys, rollback/history show the Jev mode; docs

chhhee10
and
claude
committed
dc792f7
test: pin the handler's one gated dynamic import of the Jev resolver

chhhee10
and
claude
committed
8b94626
cli: an observe both whose Jev half was withheld registers hard without a warning

chhhee10
and
claude
committed
ee984f8
daemon: don't re-send CLI policy errors the active deployment no longer has

chhhee10
and
claude
committed
3e9cd78
cli: an observed both counts as hard in the reviewable survey, whatever packs declare

chhhee10
and
claude
committed
c1ddc8e
test: give "collects every kind of problem" a consistent input

chhhee10
and
claude
committed
044fe83
cli, daemon: redact an absolute path that follows `:` too

chhhee10
and
claude
committed
30da857
daemon: never run the OSS cleanup in an overridden cloud policy directory

chhhee10
and
claude
committed
f3b5a0b
fp: show jevChars, and each policy's share of a Jev budget refusal

chhhee10
and
claude
committed
5306060
daemon: Jev checks no longer reach the machine; keep the Cloud Jev mode

chhhee10
and
claude
committed
4a4b224
cli: Jev checks run on FailproofAI Cloud; call Cloud under a Cloud Jev mode

chhhee10
and
claude
committed
aa49078
fp: help says Jev checks run on FailproofAI Cloud (C10.6)

chhhee10
and
claude
committed
018377a
docs: Cloud Jev checks run on FailproofAI Cloud; CHANGELOG for C10

chhhee10
and
claude
committed
a6bb4f8
cli: measure the Cloud Jev block cap in UTF-8 bytes

chhhee10
and
claude
committed
1f9e8f0
cli: Cloud Jev checks ignore a session pause; Cloud gets 5 s to answer

chhhee10
and
claude
committed
17c186d
cli: redaction never makes FailproofAI Cloud's target checks laxer (review M1)

chhhee10
and
claude
committed
b0e5684
test: replay FailproofAI Cloud's Jev parity fixtures through the current CLI (review M2)

chhhee10
and
claude
committed
75ff60a
cli, daemon: FailproofAI Cloud Jev breaker and health report; name clashes and stale pack drops (review M3, m2, m3)

chhhee10
and
claude
committed
5842f84
cli, daemon: review minors on the machine side (m7, m8, n8, n10)

chhhee10
and
claude
committed
fa8a559
cli: a --no-transcripts connect removes a Cloud jev.json (e2e-c10 O2, user decision)

chhhee10
and
claude
committed
3e2d4f7
docs: Cloud Jev waits 5 s, ignores a session pause, and reports rate limits, outages and name clashes

chhhee10
and
claude
committed
4a7bd35
test: pin the intent store's own redaction marker in the cloud block's naming check (review M1)

chhhee10
and
claude
committed
2e966b4
fix(cloud): keep disconnect and Jev outage state fail-narrow
chhhee10
committed
2aa6434
fix(cloud): preserve shared policy directory on disconnect
chhhee10
committed
bfde4b5
test(cloud): isolate managed-policy reader from host config
chhhee10
committed
9825c0e
feat(enforcement): track agent profiles and enforce scoped Cloud policies
chhhee10
committed
0f26c6e
fix(enforcement): bind agent scope to the originating hook
chhhee10
committed
1020299
test(enforcement): replay shared agent target selector cases
chhhee10
committed
cc41294
docs(policies): explain agent-scoped Cloud deployments
chhhee10
committed
2f920d7
refactor(cloud): validate authority targets once per policy
chhhee10
committed
5d8343a
fix(ipc): require v2 daemon for scoped agent identity
chhhee10
committed
18b5f11
fix(roster): preserve existing profile IDs at capacity
chhhee10
committed
8c22f31

Commits on Oct 5, 2026

fix(roster): reclaim unassigned stale profiles at capacity, cap 256

chhhee10
and
claude
committed
1924794
chore(osv): ignore braces GHSA-vfj7-8cjw-p6xm (lint tooling, no fix)

chhhee10
and
claude
committed
25e445c