3 Commits

Author	SHA1	Message	Date
Levi Neely	d65c06f27b	implement namespace-bounded capability model ... Per-agent file ownership with Unix permission enforcement: - Agent directories owned by agent ID (UID), group 'agent' (GID) - Private files (plan, ctl, fifo): mode 0600 - owner only - Group-readable (chat, log): mode 0440 - owner + agent group - World-readable (state, id): mode 0444 - observable by all - Prompt: mode 0220 - CLI and owner can write virtfs: fix UID/GID inheritance through nested paths - Added findChildWithInheritance() to accumulate inherited UID/GID - Stat now correctly shows agent ID as owner for nested files server: admin bypass for server owner - serverAdmin variable captures the Unix user running olliesrv - Admin bypass includes empty uname, 'admin', or server owner Documentation updates: - fs/doc.go: 'The Namespace IS the Security Model' - registry/doc.go: capability-based tool access - peer.go: capability-based peer access - lessons-learned.md: 'Model compliance is not a security boundary' - architecture-9p.md: per-agent file ownership section Security evaluation: - Added experiments/security-eval/ with NERV attack corpus adaptation - Test scripts for Landlock sandbox validation - RESULTS.md documenting 0% ASR on hostile operations This implements the NERV thesis: 'An agent can only access resources explicitly bound into its namespace.' Enforcement is structural via file permissions, not behavioral via model compliance.	2026-10-06 17:41:27 +02:00
Levi Neely	765e8b9d05	add file-level doc comments and improve AGENTS.md navigation ... Agent package files now have descriptive header comments explaining their purpose: - dispatch.go: tool execution, batching, conflict detection - turn.go: turn orchestration and Submit entry point - state.go: agent state machine and notifications - history.go: message history and token tracking - compact.go: context compaction and cold summarization - cache.go: tool result caching with staleness detection - retry.go: error tracking and transient retry logic - runtime.go: preamble assembly and tool schema management - text_parse.go: text-based tool call parsing - chatlog.go: chat output formatting - chat.go: chat log storage and streaming - workflow.go: workflow classification for discovery - skill_match.go: semantic skill discovery - tool_match.go: semantic tool discovery - commands.go: slash command interception - feed.go: feed value storage with dedup - fifo.go: buffered prompt queue - peer.go: peer agent management - subagent.go: sub-agent depth and child tracking - cost.go: cost calculation and audit logging - prompt_resolver.go: prompt file resolution - local_summary.go: non-LLM text summarization - agent_config.go: configuration types AGENTS.md improvements: - Add 'Where to Start' section with entry points by concern - Expand Key Files table with cache, retry, text_parse, tool_match, skill_match, chatlog, local_summary, workflow, and proc files	2026-08-27 10:23:26 +02:00
Levi Neely	9b7de31a07	add doc.go files; decompose agent package ... doc.go: - agent, backend, session, fs, bypass, toolclient (olliesrv) - server, sandbox, registry (toolsrv) - protocol, metadata (toolsrv shared) - log, util, skills agent package decomposition: - chat.go: chat log, streaming, plan methods - state.go: State, Reply, WaitChange, SignalCh, emit - peer.go: AddPeer, RemovePeer, Peers - subagent.go: Depth, IncChildren, DecChildren, ActiveChildren - agent.go: 881 → 638 lines (core struct, identity, backend, runtime)	2026-08-27 10:03:58 +02:00