halo-shadow

Overview ¶

Command halo-shadow receives mirrored first-turn requests from halo-kong / halo-proxy, replays them against control and candidate, and stores the pairs as JSONL.

Security model: halo-shadow loads the compiled policy snapshot itself and resolves BOTH upstreams from it (experiment + variant + model alias). A mirror job carries no URL or model, so the shared token only lets a caller spend (bounded by -budget-usd) on upstreams the policy already names. Credentials are per upstream (-upstream-headers) and never follow redirects.