didericis-claude 217eadf9a1 fix(dlp): skip projection passes when exact variant is safe-listed ...

When a supervisor-approved safe-token exactly matched an env secret
(Pass 1), Passes 2 & 3 (alnum projection) still ran and re-blocked on
the same value.  Track whether any variant was found-and-approved and
skip the projection passes for that secret in that case.

2026-06-24 22:45:51 -04:00

..

backend

feat(egress): inject per-session canary token into sidecar and agent environments

2026-06-24 22:45:51 -04:00

cli

Rename TOOL_ALLOW to TOOL_EGRESS_ALLOW

2026-06-25 01:23:10 +00:00

contrib

fix(deploy-key): raise DeployKeyCollisionError on 422 key conflicts

2026-06-25 02:23:12 +00:00

__init__.py

…

agent_provider.py

refactor(types): move loaded manifest from BottleSpec to BottlePlan

2026-06-22 23:54:02 -04:00

bottle_state.py

feat(cli): add commit command to snapshot running bottle state

2026-06-23 16:53:41 -04:00

deploy_key_provisioner.py

fix(deploy-key): raise DeployKeyCollisionError on 422 key conflicts

2026-06-25 02:23:12 +00:00

dlp_detectors.py

fix(dlp): skip projection passes when exact variant is safe-listed

2026-06-24 22:45:51 -04:00

egress_addon_core.py

feat(dlp): fragmentation resistance, entropy detector, broadened known-value scan

2026-06-24 22:45:51 -04:00

egress_addon.py

Stop scanning the request body for CRLF injection

2026-06-24 20:37:26 -04:00

egress_entrypoint.sh

chore: remove all pipelock references from tests, docs, and non-pipelock source

2026-06-04 21:54:06 +00:00

egress.py

feat(egress): inject per-session canary token into sidecar and agent environments

2026-06-24 22:45:51 -04:00

env.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

git_gate.py

Supervise gitleaks inline allow exceptions

2026-06-23 17:36:08 -04:00

git_http_backend.py

fix: raise git http body cap

2026-06-10 06:29:46 +00:00

log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

manifest_agent.py

fix(pi): prepare runtime state and agent workdir

2026-06-10 00:02:28 -04:00

manifest_egress.py

Add dlp.outbound_on_match policy (block | redact | supervise)

2026-06-24 16:50:13 -04:00

manifest_extends.py

refactor: scan filenames at resolve, parse only selected agent at preflight

2026-06-22 23:54:02 -04:00

manifest_git.py

refactor: make static the default branch in _parse_key_config

2026-06-19 22:25:14 +00:00

manifest_loader.py

refactor: scan filenames at resolve, parse only selected agent at preflight

2026-06-22 23:54:02 -04:00

manifest_schema.py

fix: resolve pyright errors in manifest_schema.py

2026-06-03 23:45:20 -04:00

manifest_util.py

…

manifest.py

Default the supervise flag to true

2026-06-23 20:48:04 -04:00

sidecar_init.py

fix(macos-container): support git-gate launch

2026-06-10 22:25:00 -04:00

supervise_server.py

Rename TOOL_ALLOW to TOOL_EGRESS_ALLOW

2026-06-25 01:23:10 +00:00

supervise.py

Rename TOOL_ALLOW to TOOL_EGRESS_ALLOW

2026-06-25 01:23:10 +00:00

util.py

…

workspace.py

fix: resolve pyright type errors

2026-06-03 23:25:41 -04:00

yaml_subset.py

chore: Replace die with YamlSubsetError

2026-06-08 23:05:11 -04:00