Skip to content

v0.31.0

Choose a tag to compare

View all tags
@MarkKropf MarkKropf released this 07 Jun 03:01
v0.31.0
7184f4f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.31.0 — fail-closed per-machine narrow-only gate (P3 S1)

Adds donmai/runner/access.ResolveMachineCell: a pure, DB-free narrow-only enforcement that intersects a per-(machine, workload) access config against a closed platformAllowed ceiling — intersection-only, fail-closed (can only restrict, never grant), mirroring the platform narrow-only core. Not yet wired into the daemon (a later step actuates it). Verified by 4000-vector adversarial property tests + golden vectors shared with the platform. Additive; no behavior change.

🤖 Generated with Claude Code

Assets 11
Loading