Alexander Watson
05add24f91
chore(prover): add SPDX license headers to registry and testdata YAML files
...
Signed-off-by: Alexander Watson <zredlined@gmail.com >
2026-03-31 09:08:57 -07:00
Alexander Watson
560365cc3b
fix(sdk): gracefully handle missing proto stubs in __init__.py
...
Wrap the sandbox import in try/except so subpackages like
openshell.prover can be imported without a full Rust build.
Removes the conftest.py namespace hack that was working around this.
Signed-off-by: Alexander Watson <zredlined@gmail.com >
2026-03-31 08:58:08 -07:00
Alexander Watson
d7f1f8052d
feat(prover): add OpenShell Policy Prover (OPP) to Python SDK
...
Integrate Z3-based formal verification for sandbox policies as
openshell.prover. Detects data exfiltration paths, write bypass
attacks, L7 enforcement gaps, overpermissive methods, and privilege
escalation via binary capability chains.
Closes #699
Signed-off-by: Alexander Watson <zredlined@gmail.com >
2026-03-31 08:31:00 -07:00
Piotr Mlocek
3a328be853
feat(inference): verify endpoints before saving routes ( #291 )
...
Closes #273
Verify inference endpoints synchronously on the server during set/update, expose a --no-verify escape hatch in the CLI and Python helper, and return actionable failures when validation does not pass.
2026-03-15 19:36:23 -07:00
Drew Newberry
20c32716ad
fix(bootstrap): detect missing sandbox supervisor binary during gateway health check ( #281 )
2026-03-13 15:07:50 -07:00
Drew Newberry
fbd93a4632
refactor: rename navigator- crate prefix to openshell- ( #277 )
2026-03-13 02:02:18 -07:00
Drew Newberry
7b0a243304
ci: remove sandbox docker build from publish and e2e workflows ( #275 )
2026-03-13 00:56:07 -07:00
Drew Newberry
756950140c
refactor(python): rename navigator module to openshell and migrate config to gateway paths ( #220 )
2026-03-10 22:24:04 -07:00
Alexander Watson