All pull requests

Pull requests

• feat(policy): generate the Cedar schema of a tool pack

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #220·ferdingler opened Oct 29, 2026Collaborator·6 of 8 tasks·

  ·
  1

• test(policy): fuzz the tool pack shell parser

  Area - Tool Containment (Binaries/Local MCP)chore
  #219·ferdingler opened Oct 29, 2026Collaborator·5 of 8 tasks·

  ·

• refactor(egress): move the gateway's HTTP to hyper, and remove its dead and duplicate code

  Area - Egress/Credschore
  #218·siwachabhi opened Oct 29, 2026·6 of 8 tasks·

  ·

• feat(box): add reload library API

  Area - policy-engineenhancement
  #217·gautamsirdeshmukh opened Oct 29, 2026Contributor·7 of 8 tasks·

  ·
  4

• fix(policy): report the real transport on an http response event

  Area - Egress/CredsArea - policy-enginebug
  #213·abhisheksp opened Oct 29, 2026Contributor·8 tasks done·

  ·
  1

• fix(policy): record the destination address on a net:connect outcome

  Area - Egress/CredsArea - policy-enginebug
  #212·abhisheksp opened Oct 29, 2026Contributor·8 tasks done·

  ·
  4

• ci: bump taiki-e/install-action from 2.87.29 to 2.87.31

  choredependenciesgithub_actions
  #209·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• ci: bump Swatinem/rust-cache from 2.9.2 to 2.9.3

  choredependenciesgithub_actions
  #208·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• feat(release): notarize and staple the macOS package before publication

  Area - Releaseenhancement
  #206·hanaduy opened Oct 28, 2026Contributor·6 of 8 tasks·

  ·
  5

• feat(box): name a stdio MCP server's alias with an optional alias key

  Area - Tool Containment (Binaries/Local MCP)enhancement
  #204·notowen333 opened Oct 28, 2026Contributor·2 of 8 tasks·

  ·
  3

• ci(rust): bump the production-minor group across 2 directories with 15 updates

  choredependencies
  #202·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  1

• test: cover denied executable relocation through the broker

  #201·kevin-orellana opened Oct 28, 2026Collaborator·8 tasks done·

  ·
  2

• fix: refuse unsafe Linux file permission requests

  #199·kevin-orellana opened Oct 28, 2026Collaborator·6 of 8 tasks·

  ·
  3

• test: add portable Linux target validation

  #198·kevin-orellana opened Oct 28, 2026Collaborator·8 tasks done·

  ·
  11

• docs: state Linux native network access in operator guides

  #196·kevin-orellana opened Oct 28, 2026Collaborator·6 of 8 tasks·

  ·
  6

• fix(policy): tool pack validator fixes and increased the test corpus

  #195·ferdingler opened Oct 28, 2026Collaborator·8 tasks done·

  ·
  14

• feat: add Linux filesystem policy operations

  #193·kevin-orellana opened Oct 27, 2026Collaborator·6 tasks done·

  ·
  6

• feat: add Linux native kernel mechanisms

  #191·kevin-orellana opened Oct 27, 2026Collaborator·6 tasks done·

  ·
  5

• feat: activate Linux native filesystem policy

  #188·kevin-orellana opened Oct 27, 2026Collaborator·6 tasks done·

  ·
  2

• test: strengthen Linux boundary and credential-daemon checks

  #187·kevin-orellana opened Oct 27, 2026Collaborator·8 tasks done·

  ·
  2

• ci: require real Linux test execution

  #185·kevin-orellana opened Oct 27, 2026Collaborator·8 tasks done·

  ·
  9

• Support an opt-in agent backend for masked-proc containers

  #182·Kimiyu-186 opened Oct 27, 2026·4 of 7 tasks·

  ·

• test(box): cover Linux native server helpers

  #179·kevin-orellana opened Oct 27, 2026Collaborator·8 tasks done·

  ·
  6

• fix: reject unresolved host paths and bound native filename scans

  #152·kevin-orellana opened Oct 22, 2026Collaborator·8 tasks done·

  ·
  12

• feat(box): reach a running box's policy from a library caller

  #149·hanaduy opened Oct 22, 2026Contributor·8 tasks done·

  ·