Skip to content

v0.32.0

Choose a tag to compare

View all tags
@MarkKropf MarkKropf released this 07 Jun 04:22
v0.32.0
a334ee3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Two-axis provider model — P3 daemon prerequisite

Daemon plumbing for the fail-closed per-machine model-access gate (P3 S1 → S3).

  • Config.ModelAccess *access.ModelAccessConfig — host-scoped, policy-only model-access narrowing config (no credentials).
  • modelAccess.set / modelAccess.clear daemon mutation cases (org-admin gated upstream; applied via mutation_apply).
  • SessionSpec / SessionResolvedProfile surface the gate inputs to OnPreSpawn: PlatformAllowed, AuthMode, WorkType, Mode, Company, Model, Workload.
  • PollItemToSessionSpec copies the gate inputs through (platformAllowed by-reference, no transform).

Pure plumbing — OnPreSpawn signature unchanged, no enforcement yet (the rensei-tui S3 gate consumes these inputs). Additive and nil-identity: a nil ModelAccess block is a no-op.

Built and tested with GOWORK=off.

Assets 11
Loading