Commit Graph
5 Commits
Author SHA1 Message Date
Alexander Watson 23f1be80fb fix(sdk): narrow proto import suppression per review feedback
Replace broad contextlib.suppress with explicit error inspection.
Proto/gRPC import failures are silently logged. Other ImportErrors
surface as warnings so real issues aren't swallowed.

Signed-off-by: Alexander Watson <zredlined@gmail.com>
2026-04-02 08:33:21 -07:00
Alexander Watson b9fc0d3b8d refactor(prover): simplify to two Zelkova-like verification queries
Narrow OPP to two yes/no security questions:
1. Can data leave this sandbox? (exfiltration)
2. Can the agent write despite read-only intent? (write bypass)

Removes 4 advisory/lint queries (overpermissive methods, L4 gaps,
binary inheritance, inference relay), 3 output modes (Mermaid,
topology, HTML), and fixes 3 bugs (include_workdir not used in
exfil analysis, __all__ broken when protos missing, CLI PYTHONPATH).

~40% line reduction (2900 -> 1769 lines).

Signed-off-by: Alexander Watson <zredlined@gmail.com>
2026-03-31 11:12:44 -07:00
Alexander Watson 0aaba52249 fix(sdk): use contextlib.suppress per SIM105 lint rule
Signed-off-by: Alexander Watson <zredlined@gmail.com>
2026-03-31 10:06:46 -07:00
Alexander Watson 560365cc3b fix(sdk): gracefully handle missing proto stubs in __init__.py
Wrap the sandbox import in try/except so subpackages like
openshell.prover can be imported without a full Rust build.
Removes the conftest.py namespace hack that was working around this.

Signed-off-by: Alexander Watson <zredlined@gmail.com>
2026-03-31 08:58:08 -07:00
Drew Newberry 756950140c refactor(python): rename navigator module to openshell and migrate config to gateway paths (#220) 2026-03-10 22:24:04 -07:00