ARCH: Finalize Microkernel Decoupling - Move behavioral skills to dynamic user-space
This commit is contained in:
@@ -23,8 +23,7 @@ While the *Formal Prover* ensures an action is "legal" (e.g., "Yes, you are allo
|
||||
*** Secret Exposure Check
|
||||
Retrieves all active secrets from the vault and scans the payload for potential leaks.
|
||||
|
||||
#+begin_src lisp :tangle ../src/bouncer.lisp
|
||||
(in-package :org-agent)
|
||||
#+begin_src lisp
|
||||
(defun bouncer-scan-secrets (text)
|
||||
"Returns the name of the secret found in TEXT, or NIL if clean."
|
||||
(when (and text (stringp text))
|
||||
@@ -40,8 +39,7 @@ Retrieves all active secrets from the vault and scans the payload for potential
|
||||
*** Network Exfiltration Check
|
||||
Inspects shell commands for unwhitelisted domains or IP addresses.
|
||||
|
||||
#+begin_src lisp :tangle ../src/bouncer.lisp
|
||||
(in-package :org-agent)
|
||||
#+begin_src lisp
|
||||
(defun bouncer-check-network-exfil (cmd)
|
||||
"Returns T if the command appears to target an unwhitelisted external host."
|
||||
(when (and cmd (stringp cmd))
|
||||
@@ -58,8 +56,7 @@ Inspects shell commands for unwhitelisted domains or IP addresses.
|
||||
** Runtime Guard (bouncer-check)
|
||||
The primary entry point for all high-impact actions.
|
||||
|
||||
#+begin_src lisp :tangle ../src/bouncer.lisp
|
||||
(in-package :org-agent)
|
||||
#+begin_src lisp
|
||||
(defun bouncer-check (action context)
|
||||
"The 5-Vector security gate. Blocks or queues actions based on risk."
|
||||
(let* ((target (getf action :target))
|
||||
@@ -100,8 +97,7 @@ The primary entry point for all high-impact actions.
|
||||
#+end_src
|
||||
|
||||
** Approval Processing
|
||||
#+begin_src lisp :tangle ../src/bouncer.lisp
|
||||
(in-package :org-agent)
|
||||
#+begin_src lisp
|
||||
(defun bouncer-process-approvals ()
|
||||
"Scans the object store for APPROVED flight plans and re-injects their actions."
|
||||
(let ((approved-nodes (list-objects-with-attribute :TODO "APPROVED"))
|
||||
@@ -123,8 +119,7 @@ The primary entry point for all high-impact actions.
|
||||
#+end_src
|
||||
|
||||
** Skill Definition
|
||||
#+begin_src lisp :tangle ../src/bouncer.lisp
|
||||
(in-package :org-agent)
|
||||
#+begin_src lisp
|
||||
(defskill :skill-bouncer
|
||||
:priority 100
|
||||
:trigger (lambda (ctx)
|
||||
|
||||
Reference in New Issue
Block a user