2 Commits

Include renames

Author	SHA1	Message	Date
Alexander Watson	b9fc0d3b8d	refactor(prover): simplify to two Zelkova-like verification queries ... Narrow OPP to two yes/no security questions: 1. Can data leave this sandbox? (exfiltration) 2. Can the agent write despite read-only intent? (write bypass) Removes 4 advisory/lint queries (overpermissive methods, L4 gaps, binary inheritance, inference relay), 3 output modes (Mermaid, topology, HTML), and fixes 3 bugs (include_workdir not used in exfil analysis, __all__ broken when protos missing, CLI PYTHONPATH). ~40% line reduction (2900 -> 1769 lines). Signed-off-by: Alexander Watson <zredlined@gmail.com>	2026-03-31 11:12:44 -07:00
Alexander Watson	d7f1f8052d	feat(prover): add OpenShell Policy Prover (OPP) to Python SDK ... Integrate Z3-based formal verification for sandbox policies as openshell.prover. Detects data exfiltration paths, write bypass attacks, L7 enforcement gaps, overpermissive methods, and privilege escalation via binary capability chains. Closes #699 Signed-off-by: Alexander Watson <zredlined@gmail.com>	2026-03-31 08:31:00 -07:00