Vincent Koc
|
d5e4ed93fa
|
refactor(policy): localize internal declarations (#101963)
|
2026-07-07 19:17:22 -07:00 |
|
Gio Della-Libera
|
28316c8c07
|
policy: keep recommendations out of attestations
|
2026-07-04 19:34:17 -07:00 |
|
Gio Della-Libera
|
0af35c1477
|
policy: keep fix recommendations policy-owned
|
2026-07-04 19:34:17 -07:00 |
|
Gio Della-Libera
|
6f7d1427c6
|
policy: emit fix recommendations in json
|
2026-07-04 19:34:17 -07:00 |
|
Peter Steinberger
|
4fa5092cdc
|
docs: document small extension sources
|
2026-06-04 21:02:07 -04:00 |
|
Gio Della-Libera
|
08beb6b0e8
|
Policy: add policy file comparison command (#86768)
Merged via squash.
Prepared head SHA: 2023e8cba1
Co-authored-by: giodl73-repo <235387111+giodl73-repo@users.noreply.github.com>
Reviewed-by: @giodl73-repo
|
2026-05-28 23:10:27 -07:00 |
|
Peter Steinberger
|
c71c49c460
|
fix(ci): address lint and test type failures
|
2026-05-27 15:56:12 -04:00 |
|
Peter Steinberger
|
94749b0a45
|
fix(cli): reject malformed numeric inputs
|
2026-05-27 15:43:12 -04:00 |
|
Gio Della-Libera
|
a30ac3f8d7
|
Policy: add tool metadata conformance (#80056)
* feat(policy): add tool metadata conformance checks
* Add policy trusted tool runtime gate
* Use requireMetadata for tool policy
Make tools.requireMetadata the canonical policy schema for risk, sensitivity, and owner requirements. Update runtime enforcement, doctor findings, evidence parsing, tests, and policy docs to use the new schema.
* fix(policy): persist approval metadata
* fix(policy): refresh approval metadata artifacts
* docs(policy): list all tool finding checks
* fix(policy): parse multiline tool metadata
* test(policy): cover unparseable policy check output
* fix(policy): resolve oc-path api in packaged dist
* fix(policy): clear post-rebase CI failures
* test(policy): clear post-rebase CI failures
* fix(policy): restore watch and align validation
* fix(policy): clear ci gate failures
* Simplify policy tool evidence parsing
|
2026-05-20 20:47:32 -07:00 |
|
Gio Della-Libera
|
cbf72e5e26
|
feat(policy): add channel conformance checks (#80407)
Summary:
- Add the bundled Policy plugin with policy-backed doctor checks for channel conformance.
- Add `openclaw policy check` attestations, accepted-attestation drift checks, and opt-in doctor repair.
- Add policy CLI docs, generated plugin inventory/reference docs, and changelog credit.
Verification:
- node --import tsx scripts/sync-plugin-versions.ts --check
- pnpm plugins:inventory:check
- pnpm docs:list
- git diff --check origin/main..HEAD
- node scripts/run-vitest.mjs extensions/policy/src/policy-state.test.ts extensions/policy/src/cli.test.ts extensions/policy/src/doctor/register.test.ts src/flows/bundled-health-checks.test.ts src/cli/program/register.maintenance.test.ts
- codex review --uncommitted; accepted finding fixed, reran clean
- codex review --commit HEAD
- GitHub CI for 4e09b067f4: CI, Workflow Sanity, CodeQL, CodeQL Critical Quality, OpenGrep PR Diff, Real behavior proof, Dependency Change Awareness all green; reran failed Windows Node setup job successfully
Co-authored-by: Gio Della-Libera <giodl73@gmail.com>
Co-authored-by: Gio Della-Libera <giodl@microsoft.com>
|
2026-05-20 11:50:21 +01:00 |
|