Kit OC5 9e9eb08d96 compute guard: line-scoped allow entries; allow MindKeychain.jsx's two OAuth endpoints only ...

Allow entries may carry matches: (regexes); then only matching lines are
allowed, so an allowed file can't smuggle in a new call. windy-pro #609
MindKeychain.jsx: openrouter.ai/auth? and /api/v1/auth/keys (BYOK key
acquisition via OAuth PKCE, no inference; successor of the MindPanel
allow, ADR-064). An inference call in the same file still flags (tested).
Orchestrator-approved.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-23 15:46:53 -04:00

..

__init__.py

G0: cell substrate — invariants made executable

2026-08-11 14:19:28 -04:00

test_canary_cleanup.py

canary: end the hub session the login probe opens (journey cleanup rule)

2026-09-23 13:39:55 -04:00

test_ci_hygiene.py

ci-hygiene guard: lockfile-only installs, pinned images, no host-port services (warn-only)

2026-09-23 15:30:51 -04:00

test_compute_guard.py

compute guard: line-scoped allow entries; allow MindKeychain.jsx's two OAuth endpoints only

2026-09-23 15:46:53 -04:00

test_ept_and_throttle.py

throttle: stop claiming to limit pushes we cannot see

2026-08-13 23:33:30 -04:00

test_guards_report.py

grant-owned: windy-pro ROOT .env.example (desktop BYOK dev fallback; hub reads neither)

2026-09-23 15:45:33 -04:00

test_hub_jwt.py

auth: token contract v1 (aud windy_git, both issuers); CI for eternitas

2026-09-23 02:58:56 -04:00

test_invariants.py

security: never bundle credential repos to R2 in plaintext

2026-09-23 10:48:42 -04:00

test_pr_status_bridge.py

ci-hygiene guard: lockfile-only installs, pinned images, no host-port services (warn-only)

2026-09-23 15:30:51 -04:00

test_push_velocity.py

push velocity: key humans on windy_identity_id (SSO link); no id -> system + caller

2026-09-23 14:06:27 -04:00

test_telemetry.py

telemetry: UPDATE 7 — read the ingest body; count quarantined + dropped on heartbeats

2026-09-23 12:32:28 -04:00

test_webhooks_behavior.py

test: behavioral G3.5 webhook tests (audit: tests were source-string asserts)

2026-09-23 03:26:14 -04:00