Alexander Watson 52fdded395 fix(prover): only flag write bypass on explicit read-only intent ...

L4-only endpoints are not implicitly read-only. A policy with
access: full and no protocol is an explicit grant of full access,
not a violated intent. Write bypass now only fires when the policy
expresses read-only intent via access: read-only or GET-only L7 rules.

Signed-off-by: Alexander Watson <zredlined@gmail.com>

2026-03-31 17:10:42 -07:00

..

openshell

fix(prover): only flag write bypass on explicit read-only intent

2026-03-31 17:10:42 -07:00