Alexander Watson b9fc0d3b8d refactor(prover): simplify to two Zelkova-like verification queries ...

Narrow OPP to two yes/no security questions:
1. Can data leave this sandbox? (exfiltration)
2. Can the agent write despite read-only intent? (write bypass)

Removes 4 advisory/lint queries (overpermissive methods, L4 gaps,
binary inheritance, inference relay), 3 output modes (Mermaid,
topology, HTML), and fixes 3 bugs (include_workdir not used in
exfil analysis, __all__ broken when protos missing, CLI PYTHONPATH).

~40% line reduction (2900 -> 1769 lines).

Signed-off-by: Alexander Watson <zredlined@gmail.com>

2026-03-31 11:12:44 -07:00

..

_proto

refactor(python): rename navigator module to openshell and migrate config to gateway paths (#220)

2026-03-10 22:24:04 -07:00

prover

refactor(prover): simplify to two Zelkova-like verification queries

2026-03-31 11:12:44 -07:00

__init__.py

refactor(prover): simplify to two Zelkova-like verification queries

2026-03-31 11:12:44 -07:00

openshell_test.py

refactor(python): rename navigator module to openshell and migrate config to gateway paths (#220)

2026-03-10 22:24:04 -07:00

sandbox_test.py

feat(inference): verify endpoints before saving routes (#291)

2026-03-15 19:36:23 -07:00

sandbox.py

feat(inference): verify endpoints before saving routes (#291)

2026-03-15 19:36:23 -07:00