ARCH: Finalize Microkernel Decoupling - Move behavioral skills to dynamic user-space

This commit is contained in:
2026-04-13 16:11:09 -04:00
parent 34f59a6e43
commit 19fb888434
74 changed files with 129 additions and 2744 deletions

View File

@@ -23,8 +23,7 @@ While the *Formal Prover* ensures an action is "legal" (e.g., "Yes, you are allo
*** Secret Exposure Check
Retrieves all active secrets from the vault and scans the payload for potential leaks.
#+begin_src lisp :tangle ../src/bouncer.lisp
(in-package :org-agent)
#+begin_src lisp
(defun bouncer-scan-secrets (text)
"Returns the name of the secret found in TEXT, or NIL if clean."
(when (and text (stringp text))
@@ -40,8 +39,7 @@ Retrieves all active secrets from the vault and scans the payload for potential
*** Network Exfiltration Check
Inspects shell commands for unwhitelisted domains or IP addresses.
#+begin_src lisp :tangle ../src/bouncer.lisp
(in-package :org-agent)
#+begin_src lisp
(defun bouncer-check-network-exfil (cmd)
"Returns T if the command appears to target an unwhitelisted external host."
(when (and cmd (stringp cmd))
@@ -58,8 +56,7 @@ Inspects shell commands for unwhitelisted domains or IP addresses.
** Runtime Guard (bouncer-check)
The primary entry point for all high-impact actions.
#+begin_src lisp :tangle ../src/bouncer.lisp
(in-package :org-agent)
#+begin_src lisp
(defun bouncer-check (action context)
"The 5-Vector security gate. Blocks or queues actions based on risk."
(let* ((target (getf action :target))
@@ -100,8 +97,7 @@ The primary entry point for all high-impact actions.
#+end_src
** Approval Processing
#+begin_src lisp :tangle ../src/bouncer.lisp
(in-package :org-agent)
#+begin_src lisp
(defun bouncer-process-approvals ()
"Scans the object store for APPROVED flight plans and re-injects their actions."
(let ((approved-nodes (list-objects-with-attribute :TODO "APPROVED"))
@@ -123,8 +119,7 @@ The primary entry point for all high-impact actions.
#+end_src
** Skill Definition
#+begin_src lisp :tangle ../src/bouncer.lisp
(in-package :org-agent)
#+begin_src lisp
(defskill :skill-bouncer
:priority 100
:trigger (lambda (ctx)