bot-bottle

Files

T

didericis-claude 11cf12188d feat(egress): inject per-session canary token into sidecar and agent environments

EgressPlan gains a `canary: str` field (default "") populated in Egress.prepare()
using secrets.token_urlsafe(32).  Each launched bottle:

  - sidecar receives EGRESS_TOKEN_CANARY=<value> (literal env entry, scanned by
    existing known-secrets detector without any detector code changes)
  - agent receives BOT_BOTTLE_CANARY=<value> (visible fake secret that signals
    exfiltration with zero false positives if it appears in outbound traffic)

Docker compose and macos-container backends updated; smolmachines shares docker
compose and so picks this up automatically.  Unit tests cover canary uniqueness,
detection via scan_known_secrets, and EgressPlan backward-compat default.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-24 23:09:11 -04:00

docker

feat(egress): inject per-session canary token into sidecar and agent environments

2026-06-24 23:09:11 -04:00

macos_container

feat(egress): inject per-session canary token into sidecar and agent environments

2026-06-24 23:09:11 -04:00

smolmachines

fix(smolmachines): exclude /tmp+/var/tmp from snapshot; mkdir -p on boot

2026-06-23 16:53:41 -04:00

__init__.py

refactor(freezer): drop Bottle from commit signature