3 Commits

Include renames

Author	SHA1	Message	Date
Alexander Watson	8ba9e26b37	refactor(prover): focus exfil on enforcement gaps, drop inheritance ... Only report exfiltration paths where enforcement diverges from intent: - L4-only endpoints (no HTTP inspection) - Wire protocol bypasses (L7 exists but binary circumvents it) L7-enforced endpoints where POST is explicitly allowed are the policy working as designed, not findings. Remove binary inheritance from the Z3 model — transitive spawn chain access produced noise (git inheriting access to api.telegram.org via node). Direct policy grants only. Inheritance can return later as an opt-in extended analysis mode. NemoClaw default policy: 38 findings -> 9 actionable gaps. Signed-off-by: Alexander Watson <zredlined@gmail.com>	2026-03-31 13:40:51 -07:00
Alexander Watson	05add24f91	chore(prover): add SPDX license headers to registry and testdata YAML files ... Signed-off-by: Alexander Watson <zredlined@gmail.com>	2026-03-31 09:08:57 -07:00
Alexander Watson	d7f1f8052d	feat(prover): add OpenShell Policy Prover (OPP) to Python SDK ... Integrate Z3-based formal verification for sandbox policies as openshell.prover. Detects data exfiltration paths, write bypass attacks, L7 enforcement gaps, overpermissive methods, and privilege escalation via binary capability chains. Closes #699 Signed-off-by: Alexander Watson <zredlined@gmail.com>	2026-03-31 08:31:00 -07:00