Alexander Watson 52fdded395 fix(prover): only flag write bypass on explicit read-only intent ...

L4-only endpoints are not implicitly read-only. A policy with
access: full and no protocol is an explicit grant of full access,
not a violated intent. Write bypass now only fires when the policy
expresses read-only intent via access: read-only or GET-only L7 rules.

Signed-off-by: Alexander Watson <zredlined@gmail.com>

2026-03-31 17:10:42 -07:00

..

_proto

refactor(python): rename navigator module to openshell and migrate config to gateway paths (#220)

2026-03-10 22:24:04 -07:00

prover

fix(prover): only flag write bypass on explicit read-only intent

2026-03-31 17:10:42 -07:00

__init__.py

refactor(prover): simplify to two Zelkova-like verification queries

2026-03-31 11:12:44 -07:00

openshell_test.py

refactor(python): rename navigator module to openshell and migrate config to gateway paths (#220)

2026-03-10 22:24:04 -07:00

sandbox_test.py

feat(inference): verify endpoints before saving routes (#291)

2026-03-15 19:36:23 -07:00

sandbox.py

feat(inference): verify endpoints before saving routes (#291)

2026-03-15 19:36:23 -07:00