profile

type Approval ¶

type Approval int

Approval is a partial order. Interactive and policy-gated approval are incomparable; classifier-gated approval does not satisfy the generic human-review requirement; deny-all is strongest because it never bypasses approval.

const (
	// ApprovalNone permits execution without an approval mechanism.
	ApprovalNone Approval = iota
	// ApprovalRequired is a floor-only generic requirement represented on a
	// canonical floor. It is satisfied by itself, interactive or policy-gated
	// approval, but not by no approval or classifier-gated approval.
	ApprovalRequired
	// ApprovalInteractive requires a person to approve actions.
	ApprovalInteractive
	// ApprovalPolicyGated requires a default-deny approval policy.
	ApprovalPolicyGated
	// ApprovalDenyAll rejects every action and therefore satisfies every floor.
	ApprovalDenyAll
	// ApprovalClassifierGated routes commands through a probabilistic
	// classifier. It is not a human-review mechanism or a security boundary.
	ApprovalClassifierGated
)

func (a Approval) Satisfies(floor Approval) bool

func (a Approval) String() string

type ApprovalPolicy ¶

type ApprovalPolicy struct {
	Name      string
	Version   string
	Allowlist []string
}

ApprovalPolicy is a versioned, closed-registry default-deny command policy. Allowlist records the command shapes that are part of its canonical identity; authorization itself is performed over a parsed shell AST.

func PolicyByName(name string) (ApprovalPolicy, error)

func (p ApprovalPolicy) Allows(src string) bool

func (p ApprovalPolicy) AllowsExec(path string, args []string) bool

func (p ApprovalPolicy) Hash() string

type Declaration ¶

type Declaration struct {
	Value  any    `json:"value"`
	Stance Stance `json:"stance"`
}

type Descriptor ¶

type Descriptor struct {
	// contains filtered or unexported fields
}

Descriptor owns extraction, satisfaction, and violation rendering for one typed trust-floor dimension from docs/specs/PROFILES.md §3.

func Descriptors() []Descriptor

func (d Descriptor) Name() string

type Exec ¶

type Exec struct {
	Name            string
	RequiredTrust   Trust
	MaxIters        int
	MaxTokens       int
	FinishNudge     int
	RunTimeout      time.Duration
	Effort          string
	Worktree        string
	VerifyContinue  bool
	AutoVerify      bool
	Memory          bool
	BootContext     bool
	StandingContext bool
	BatchReads      bool
	// Fields added in generation two. They do not participate in v1 hashes.
	AutoVerifySoft    bool
	RequireDiff       bool
	ReadWindow        int
	ReadOutline       bool
	ChurnNudgeRuns    int
	NavSpiralWindow   int
	AnswerNudgeWindow int
}

Exec is a versioned execution-profile descriptor. The original fields remain directly available for consumers of generation one profiles.

func ExecByName(name string) (Exec, error)

func (e Exec) Hash() string

type FieldID ¶

type FieldID string

type Network ¶

type Network int

Network is ordered from unrestricted connectivity to network-off.

const (
	// NetworkUnrestricted permits network connectivity.
	NetworkUnrestricted Network = iota
	// NetworkAllowlisted permits only allowlisted destinations.
	NetworkAllowlisted
	// NetworkOff disables network connectivity.
	NetworkOff
)

func (n Network) Satisfies(floor Network) bool

func (n Network) String() string

type Normalized ¶

type Normalized struct {
	Exec
	CLIOnly map[string]any
}

Normalized is the complete profile-resolved result. CLIOnly is deliberately separate because it is not descriptor content.

type Overrides ¶

type Overrides struct {
	MaxIters          *int
	MaxTokens         *int
	FinishNudge       *int
	RunTimeout        *time.Duration
	Effort            *string
	Worktree          *string
	VerifyContinue    *bool
	AutoVerify        *bool
	AutoVerifySoft    *bool
	Memory            *bool
	BootContext       *bool
	StandingContext   *bool
	BatchReads        *bool
	RequireDiff       *bool
	ReadWindow        *int
	ReadOutline       *bool
	ChurnNudgeRuns    *int
	NavSpiralWindow   *int
	AnswerNudgeWindow *int
	// CLIOnly is carried through for consumers; it never changes canonicality.
	CLIOnly map[string]any
}

Overrides contains the profile-resolved command-line settings. Nil means the flag was absent, which is distinct from explicitly selecting a zero value.

type Posture ¶

type Posture struct {
	Sandbox      SandboxClass      `trust:"sandbox"`
	MinIsolation sandbox.Isolation `trust:"min-isolation"`
	Worktree     Worktree          `trust:"worktree"`
	Approval     Approval          `trust:"approval"`
	Secrets      Secrets           `trust:"secrets"`
	Network      Network           `trust:"network"`
}

Posture is the six-dimensional trust floor specified by docs/specs/PROFILES.md §1. Its tags are the completeness anchor for the descriptor table required by §3.

func FloorFor(t Trust) Posture

func (p Posture) RequiresNetworkOff() bool

type SandboxClass ¶

type SandboxClass int

SandboxClass is the sandbox boundary class, ordered weakest to strongest.

const (
	// SandboxLocal is host-local execution; command gating is an approval mode,
	// not a sandbox class.
	SandboxLocal SandboxClass = iota
	// SandboxContainer is a container execution boundary.
	SandboxContainer
)

func (c SandboxClass) Satisfies(floor SandboxClass) bool

func (c SandboxClass) String() string

type Secrets ¶

type Secrets int

Secrets is ordered from ambient host secrets to no secret exposure.

const (
	// SecretsAmbient exposes the ambient environment.
	SecretsAmbient Secrets = iota
	// SecretsAllowlist exposes only a clean-environment allowlist.
	SecretsAllowlist
	// SecretsNone exposes no secrets.
	SecretsNone
)

func (s Secrets) Satisfies(floor Secrets) bool

func (s Secrets) String() string

type Source ¶

type Source string

const (
	SourceProfile Source = "profile"
	SourceCLI     Source = "cli"
	SourceTrust   Source = "trust"
)

type Stance ¶

type Stance string

type Trace ¶

type Trace struct {
	Fields               map[string]TraceEntry
	Canonical            bool
	SelectedTrust        Trust
	ProfileRequiredTrust Trust
}

type TraceEntry ¶

type TraceEntry struct {
	Value  any
	Source Source
}

type Trust ¶

type Trust string

Trust is one of the canonical operator-selected trust profiles from docs/specs/PROFILES.md §1. Names are intentionally not aliases.

const (
	// TrustedLocal is for code the operator wrote and trusts on the host.
	TrustedLocal Trust = "trusted-local"
	// ReviewedLocal is host-visible code execution subject to approval.
	ReviewedLocal Trust = "reviewed-local"
	// Container is for code that needs a process-isolated container boundary.
	Container Trust = "container"
	// Untrusted is for hostile code requiring the strictest shipped floor.
	Untrusted Trust = "untrusted"
)

func ParseTrust(s string) (Trust, error)

type TrustPosture ¶

type TrustPosture struct {
	Selected Trust
	Posture  Posture
	Surface  string
}

TrustPosture is the already-normalized trust result supplied by the caller. Resolve deliberately does not select or derive trust itself.

type Worktree ¶

type Worktree int

Worktree controls whether execution must use a worktree, ordered weakest to strongest as required by docs/specs/PROFILES.md §1.

const (
	// WorktreeAuto permits today's automatic worktree behavior.
	WorktreeAuto Worktree = iota
	// WorktreeRequired requires an isolated worktree.
	WorktreeRequired
)

func (w Worktree) Satisfies(floor Worktree) bool

func (w Worktree) String() string