chore(guard): remove legacy markov risk model

[hasandemirkiran]

Summary

• ENG-325 follow-up: remove the obsolete Markov risk-model runtime path so Guard only uses deterministic policy plus the local LLM judge.
• Delete Markov/model-snapshot/trace-training packages and embedded models/guard artifacts.
• Remove model startup flags/env usage and dashboard/docs/scripts references to Markov risk scoring.

Verification

• go test ./...
• pnpm --dir web/guard-dashboard typecheck
• scripts/build-guard-dashboard-assets.sh
• scripts/guard-e2e-local.sh

Notes

• scripts/build-guard-dashboard-assets.sh completed, but Vite printed its existing Node version warning because this machine is on Node 18.20.7 while Vite recommends Node 20.19+ or 22.12+. The build exited successfully.

Stacked on: #154
Linear: ENG-325

[hasandemirkiran]

• Clean up local launch wording #158
• fix(dashboard): contain command drawer text #157
• feat(dashboard): show guard diagnostics #156
• chore(guard): remove legacy markov risk model #155 👈 (View in Graphite)
• feat(guard): connect deterministic policy and judge #154
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[greptile-apps]

Greptile Summary

This PR removes the legacy Markov risk-model path from Guard. The main changes are:

• Deleted Markov, trace-training, model snapshot, and embedded model packages.
• Simplified Guard server policy flow to deterministic policy plus optional local judge.
• Removed model startup flags, environment handling, and runtimehost model activation.
• Updated dashboard types and copy to show deterministic and judge decision stages.

Confidence Score: 4/5

This looks close to safe, with one diagnostic workflow to fix.

• The main runtime path now consistently uses deterministic policy and the local judge.

• The smoke-test command still expects the old credential-access ask result.

• No security issue was confirmed in the changed code.

• internal/guard/cli/cli.go smoke-test expectations.

Important Files Changed

Filename	Overview
internal/guard/app/server/policy.go	Replaces scorer-backed risk decisions with deterministic policy evaluation and optional local judge decisions.
internal/guard/cli/cli.go	Removes model flags and loading, but leaves stale smoke-test expectations for credential-access decisions.
internal/runtimehost/host.go	Removes embedded model activation and starts the server with only local judge configuration.

Comments Outside Diff (1)

1. internal/guard/cli/cli.go, line 716-717 (link)

   Smoke test expects old decision The default policy path now deterministically denies credential access. These smoke-test cases still expect .env reads and cat .env to return ask, so kontext guard smoke-test fails even though the daemon is returning the new expected decision.

_{Reviews (1): Last reviewed commit: "chore(guard): remove legacy markov risk ..." | Re-trigger Greptile}

[michiosw]

Merge activity

• May 18, 4:28 PM UTC: A user started a stack merge that includes this pull request via Graphite.
• May 18, 4:30 PM UTC: Graphite rebased this pull request as part of a merge.
• May 18, 4:32 PM UTC: @michiosw merged this pull request with Graphite.