kyleandClaude Opus 5.5 7b95937c88 brokerd: the ledger raises a session's state by the stricter label ...

M5a task 21. The work is Ornith's, from the stopped run; the design
model checked it against the task file and committed it after finding
that the gate's failure came from its own reference worktree's stale
test binaries in the shared target/ (fixed with cargo clean; 944 tests).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-25 20:20:48 -07:00

..

fixtures

M3b review fixes by the design model: curl --globoff, podman --pull=never

2026-09-23 15:25:51 -07:00

support

brokerd tests: a slow fake podman no longer fails the time-limit tests

2026-09-25 16:41:44 -07:00

admin.rs

Handle approvals, refusals and grant checks on admin.sock

2026-09-20 13:54:01 -07:00

approvals.rs

Add the table of pending approvals

2026-09-19 16:48:09 -07:00

args.rs

Seal the fetch target: one value holds the URL and its host

2026-09-22 23:03:49 -07:00

audit_edges.rs

brokerd: recover a torn line in place, real dates only, bounded ttl, EMFILE

2026-09-22 21:48:24 -07:00

audit_startup.rs

Add the audit writer with its startup check

2026-09-19 16:32:37 -07:00

audit.rs

Add the audit writer with its startup check

2026-09-19 16:32:37 -07:00

broker_pending.rs

brokerd: answers carry the Mattermost post; Table::contains

2026-09-24 04:15:11 -07:00

broker_sequence.rs

brokerd: answers carry the Mattermost post; Table::contains

2026-09-24 04:15:11 -07:00

broker.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

config_gateway.rs

brokerd: config, [gateway] socket for Mattermost approvals

2026-09-24 04:18:04 -07:00

config_runner.rs

brokerd: the [runner] section

2026-09-23 01:07:21 -07:00

config.rs

Add brokerd's configuration

2026-09-19 02:24:15 -07:00

container_egress.rs

brokerd tests: a slow fake podman no longer fails the time-limit tests

2026-09-25 16:41:44 -07:00

container_grace.rs

brokerd: start pipe threads safely and collect output within a grace period

2026-09-23 16:07:15 -07:00

container_log.rs

brokerd: escape container errors in the log; prefix and quote two messages

2026-09-23 16:10:54 -07:00

container.rs

brokerd tests: a slow fake podman no longer fails the time-limit tests

2026-09-25 16:41:44 -07:00

courier.rs

brokerd: courier, carrying pending approvals to gatewayd and answers back

2026-09-24 04:25:07 -07:00

grants_mount.rs

Refuse grant paths that cannot be mounted

2026-09-22 23:06:09 -07:00

grants.rs

brokerd: recall and memory, decided under built-in grants

2026-09-25 16:41:44 -07:00

ledger_answer.rs

brokerd: answers carry the Mattermost post; Table::contains

2026-09-24 04:15:11 -07:00

ledger_label.rs

brokerd: the ledger raises a session's state by the stricter label

2026-09-25 20:20:48 -07:00

ledger_post.rs

brokerd: answers carry the Mattermost post; Table::contains

2026-09-24 04:15:11 -07:00

ledger.rs

Add the ledger: the audit writer and session state behind one lock

2026-09-20 03:30:37 -07:00

memory_port.rs

brokerd: memory calls to memoryd with the session's state; labels only stricter

2026-09-25 16:41:44 -07:00

memory_tools.rs

brokerd: recall and memory, decided under built-in grants

2026-09-25 16:41:44 -07:00

notices.rs

brokerd: escape container errors in the log; prefix and quote two messages

2026-09-23 16:10:54 -07:00

podman_args.rs

brokerd: the podman argument lists

2026-09-23 01:13:25 -07:00

policy_matching.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy_property.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy_redecide.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

runner.rs

brokerd: the refusal without a runner names the missing [runner] section

2026-09-24 11:48:49 -07:00

serve_accept_break.rs

Test --accept-break on a real break through the brokerd binary

2026-09-22 21:52:54 -07:00

serve_pointers.rs

brokerd: recover a torn line in place, real dates only, bounded ttl, EMFILE

2026-09-22 21:48:24 -07:00

serve_runner.rs

brokerd serve: run tools in containers when [runner] is set

2026-09-23 09:35:46 -07:00

serve.rs

Add brokerd serve: startup, both sockets, and the expiry thread

2026-09-20 17:24:57 -07:00

state.rs

Keep each session's taint and untrusted flag in a file

2026-09-19 03:08:46 -07:00