Alexander Watson 8ba9e26b37 refactor(prover): focus exfil on enforcement gaps, drop inheritance ...

Only report exfiltration paths where enforcement diverges from intent:
- L4-only endpoints (no HTTP inspection)
- Wire protocol bypasses (L7 exists but binary circumvents it)

L7-enforced endpoints where POST is explicitly allowed are the policy
working as designed, not findings.

Remove binary inheritance from the Z3 model — transitive spawn chain
access produced noise (git inheriting access to api.telegram.org via
node). Direct policy grants only. Inheritance can return later as an
opt-in extended analysis mode.

NemoClaw default policy: 38 findings -> 9 actionable gaps.

Signed-off-by: Alexander Watson <zredlined@gmail.com>

2026-03-31 13:40:51 -07:00

..

_proto

refactor(python): rename navigator module to openshell and migrate config to gateway paths (#220)

2026-03-10 22:24:04 -07:00

prover

refactor(prover): focus exfil on enforcement gaps, drop inheritance

2026-03-31 13:40:51 -07:00

__init__.py

refactor(prover): simplify to two Zelkova-like verification queries

2026-03-31 11:12:44 -07:00

openshell_test.py

refactor(python): rename navigator module to openshell and migrate config to gateway paths (#220)

2026-03-10 22:24:04 -07:00

sandbox_test.py

feat(inference): verify endpoints before saving routes (#291)

2026-03-15 19:36:23 -07:00

sandbox.py

feat(inference): verify endpoints before saving routes (#291)

2026-03-15 19:36:23 -07:00