didericis-claude a920203730 fix(dlp): skip projection passes when exact variant is safe-listed ...

When a supervisor-approved safe-token exactly matched an env secret
(Pass 1), Passes 2 & 3 (alnum projection) still ran and re-blocked on
the same value.  Track whether any variant was found-and-approved and
skip the projection passes for that secret in that case.

2026-06-24 23:09:11 -04:00

..

backend

feat(egress): inject per-session canary token into sidecar and agent environments

2026-06-24 23:09:11 -04:00

cli

Rename TOOL_ALLOW to TOOL_EGRESS_ALLOW

2026-06-25 01:23:10 +00:00

contrib

feat(provider): support startup args settings

2026-06-24 22:51:27 -04:00

__init__.py

…

agent_provider.py

feat(provider): support startup args settings

2026-06-24 22:51:27 -04:00

bottle_state.py

feat(cli): add commit command to snapshot running bottle state

2026-06-23 16:53:41 -04:00

deploy_key_provisioner.py

fix(deploy-key): raise DeployKeyCollisionError on 422 key conflicts

2026-06-25 02:23:12 +00:00

dlp_detectors.py

fix(dlp): skip projection passes when exact variant is safe-listed

2026-06-24 23:09:11 -04:00

egress_addon_core.py

feat(dlp): fragmentation resistance, entropy detector, broadened known-value scan

2026-06-24 23:09:11 -04:00

egress_addon.py

Stop scanning the request body for CRLF injection

2026-06-24 20:37:26 -04:00

egress_entrypoint.sh

…

egress.py

feat(egress): inject per-session canary token into sidecar and agent environments

2026-06-24 23:09:11 -04:00

env.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

git_gate.py

Supervise gitleaks inline allow exceptions

2026-06-23 17:36:08 -04:00

git_http_backend.py

…

log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

manifest_agent.py

feat(provider): support startup args settings

2026-06-24 22:51:27 -04:00

manifest_egress.py

Add dlp.outbound_on_match policy (block | redact | supervise)

2026-06-24 16:50:13 -04:00

manifest_extends.py

refactor: scan filenames at resolve, parse only selected agent at preflight

2026-06-22 23:54:02 -04:00

manifest_git.py

refactor: make static the default branch in _parse_key_config

2026-06-19 22:25:14 +00:00

manifest_loader.py

refactor: scan filenames at resolve, parse only selected agent at preflight

2026-06-22 23:54:02 -04:00

manifest_schema.py

…

manifest_util.py

…

manifest.py

Default the supervise flag to true

2026-06-23 20:48:04 -04:00

sidecar_init.py

…

supervise_server.py

Rename TOOL_ALLOW to TOOL_EGRESS_ALLOW

2026-06-25 01:23:10 +00:00

supervise.py

Rename TOOL_ALLOW to TOOL_EGRESS_ALLOW

2026-06-25 01:23:10 +00:00

util.py

…

workspace.py

…

yaml_subset.py

…