John Myers
9dc6194a2d
## Summary - Upgrade the `github` network policy from L4 pass-through to L7 TLS-terminated with Git Smart HTTP rules - Allow read operations (clone/fetch/pull) for all repos via `git-upload-pack` - Allow write operations (push) only to `johntmyers/alpha-claw` via scoped `git-receive-pack` rule - All other repos (e.g. `bravo-claw`) are implicitly denied push access - Update OPA tests to reference the `github` policy (replacing removed `gitlab` policy) ## Test plan - [x] `mise run pre-commit` passes (119 sandbox tests, clippy, fmt, python) - [x] Verified live: `git clone` works for bravo-claw - [x] Verified live: `git push` blocked for bravo-claw - [x] Verified live: `git push` allowed for alpha-claw
Navigator 🗺️
Navigator is the runtime environment for autonomous agents—the "Matrix" where they live, work, and verify.
While coding tools like Claude help agents write logic, Navigator provides the infrastructure to run it, offering a programmable factory where agents can spin up physics simulations to master tasks, generate synthetic data to fix edge cases, and safely iterate through thousands of failures in isolated sandboxes.
It transforms the data center from a static deployment target into a continuous verification engine, allowing agents to autonomously build and operate complex systems—from physical robotics to self-healing infrastructure—without needing a human to manage the infrastructure.
Quickstart
🚧 Under construction 🚧
uv pip install navigator --upgrade --pre --index-url https://urm.nvidia.com/artifactory/api/pypi/nv-shared-pypi/simple
navigator sandbox create -- claude # or opencode or codex
The sandbox container includes a minimal networking toolset by default: ping, dig, nslookup, nc, traceroute, and netstat.
Developing
See CONTRIBUTING.md for more information about developing and contributing to Navigator.
Architecture
See architecture/ for detailed architecture docs and design decisions.