diff --git a/docs/prds/0001-per-agent-egress-proxy-via-pipelock.md b/docs/prds/0001-per-agent-egress-proxy-via-pipelock.md index fea1b8f2..feef07fe 100644 --- a/docs/prds/0001-per-agent-egress-proxy-via-pipelock.md +++ b/docs/prds/0001-per-agent-egress-proxy-via-pipelock.md @@ -1,9 +1,14 @@ # PRD 0001: Per-agent egress proxy via pipelock -- **Status:** Active +- **Status:** Superseded by [PRD 0017](0017-egress-proxy-via-mitmproxy.md) + and [PRD 0052](0052-egress-dlp-addon.md) - **Author:** didericis - **Created:** 2026-05-08 +> **Superseded.** Pipelock was removed in issue #193. PRD 0017 moved +> egress enforcement and credential injection to mitmproxy; PRD 0052 moved DLP +> enforcement into the egress addon. The design below is retained as history. + ## Summary Run pipelock as a sidecar container on each bot-bottle agent's only diff --git a/docs/prds/0006-pipelock-tls-interception.md b/docs/prds/0006-pipelock-tls-interception.md index 34ea5586..43caec10 100644 --- a/docs/prds/0006-pipelock-tls-interception.md +++ b/docs/prds/0006-pipelock-tls-interception.md @@ -1,9 +1,14 @@ # PRD 0006: pipelock native TLS interception -- **Status:** Active +- **Status:** Superseded by [PRD 0017](0017-egress-proxy-via-mitmproxy.md) + and [PRD 0052](0052-egress-dlp-addon.md) - **Author:** didericis - **Created:** 2026-05-12 +> **Superseded.** Pipelock was removed in issue #193. TLS interception now +> belongs to the mitmproxy egress design in PRD 0017, with DLP implemented by +> the egress addon in PRD 0052. The design below is retained as history. + ## Summary Turn on pipelock's built-in `tls_interception` so its DLP / URL / diff --git a/docs/prds/0015-pipelock-block-remediation.md b/docs/prds/0015-pipelock-block-remediation.md index e8824281..7a4c8492 100644 --- a/docs/prds/0015-pipelock-block-remediation.md +++ b/docs/prds/0015-pipelock-block-remediation.md @@ -1,11 +1,17 @@ # PRD 0015: pipelock block remediation -- **Status:** Active +- **Status:** Superseded by [PRD 0017](0017-egress-proxy-via-mitmproxy.md) + and [PRD 0052](0052-egress-dlp-addon.md) - **Author:** didericis - **Created:** 2026-05-25 - **Parent:** PRD 0012 - **Depends on:** PRD 0013 +> **Superseded.** Pipelock and its restart-based allowlist remediation path +> were removed in issue #193. Current egress enforcement is the mitmproxy +> design from PRD 0017 with DLP in PRD 0052. The design below is retained as +> history. + ## Summary Wires the **pipelock block** path (PRD 0012 *Stuck categories*) end-to-end. The supervisor, on approval of a `pipelock-block` proposal, writes the new pipelock allowlist to the host and restarts pipelock; the agent's in-flight outbound calls may drop and rely on retry. The TUI gains a proactive `pipelock edit ` verb for operator-initiated edits unrelated to a tool call. The pipelock audit log (format defined in PRD 0013) is filled in with real entries on every edit. diff --git a/docs/prds/0024-consolidate-sidecar-bundle.md b/docs/prds/0024-consolidate-sidecar-bundle.md index abd444c1..3edf9d50 100644 --- a/docs/prds/0024-consolidate-sidecar-bundle.md +++ b/docs/prds/0024-consolidate-sidecar-bundle.md @@ -1,9 +1,13 @@ # PRD 0024: Consolidate per-bottle sidecars into a single bundle -- **Status:** Active +- **Status:** Superseded by [PRD 0070](0070-per-host-orchestrator.md) - **Author:** didericis - **Created:** 2026-05-26 +> **Superseded.** PRD 0070 replaced the per-bottle sidecar bundle with a +> persistent per-host gateway and separate orchestrator control plane. The +> design below is retained as history. + ## Summary Replace the four per-bottle sidecar containers in the Docker diff --git a/docs/prds/0037-pipelock-yaml-render-contract.md b/docs/prds/0037-pipelock-yaml-render-contract.md index a321c95d..2da8f092 100644 --- a/docs/prds/0037-pipelock-yaml-render-contract.md +++ b/docs/prds/0037-pipelock-yaml-render-contract.md @@ -1,10 +1,16 @@ # PRD 0037: Pipelock YAML Render Contract -- **Status:** Active +- **Status:** Superseded by [PRD 0017](0017-egress-proxy-via-mitmproxy.md) + and [PRD 0052](0052-egress-dlp-addon.md) - **Author:** didericis-codex - **Created:** 2026-06-02 - **Issue:** #130 +> **Superseded.** Pipelock and its YAML renderer were removed in issue #193. +> Current egress configuration is consumed by the mitmproxy design from PRD +> 0017 and its DLP addon from PRD 0052. The contract below is retained as +> history. + ## Summary Lock down the contract between `pipelock_build_config` and diff --git a/docs/prds/0067-sqlite-local-storage.md b/docs/prds/0067-sqlite-local-storage.md index 37d4265e..43e88f83 100644 --- a/docs/prds/0067-sqlite-local-storage.md +++ b/docs/prds/0067-sqlite-local-storage.md @@ -1,10 +1,17 @@ # PRD 0067: SQLite local storage -- **Status:** Active +- **Status:** Retargeted by [PRD 0070](0070-per-host-orchestrator.md) and + issues #469/#471 - **Author:** codex - **Created:** 2026-07-01 - **Issue:** #319 +> **Retargeted.** The SQLite storage and migration foundation remains in use, +> but the writable data-plane database mount described below is no longer the +> active ownership model. Issues #469/#471 removed `bot-bottle.db` from the +> data plane; under PRD 0070 only the orchestrator control plane opens the +> operational database, and gateway components reach state through RPC. + ## Summary Add a small stdlib SQLite storage layer for bot-bottle host runtime state,