 Patrick Buckley
|
a315cabe71
|
chore: polish — remove dead code, update diagrams and docs
Remove stale Redis/Bridge/MQ references found via vulture scan and
manual grep:
- bot.py docstring: remove Redis MQ reference
- server.py trusted_sources: remove "bridge"
- tls.py docstring: remove "bridge" from service list
Delete 4 obsolete diagram pairs (puml + png):
- 06-mq-protocol, 07-message-routing, 08-redis-key-schema,
10-simulator-architecture
Update 7 diagrams to reflect direct HTTP architecture:
- system-context, package-structure, workstream-states,
console-data-flow, deployment, channel-architecture,
settings-architecture
Redraw architecture-overview.svg: Console router replaces Redis MQ,
direct SSE data plane, hash ring routing.
|
2026-03-30 20:30:05 -07:00 |
|
|
Patrick Buckley
|
10165bb8a1
|
feat: add OpenShell sandbox policy for turnstone-server (#128)
* feat: add OpenShell sandbox policy for turnstone-server
Curated policy for running turnstone-server inside an OpenShell sandbox
with kernel-enforced security boundaries (Landlock, netns, seccomp).
- Filesystem: workdir read-write, /usr+/etc read-only, /tmp+/dev/null
read-write, Landlock best_effort compatibility
- Network: default-deny with allowlisted LLM APIs (OpenAI, Anthropic),
Tavily, skills.sh, GitHub (read-only L7), MCP registry (read-only L7),
Redis localhost, package registries, curated web_fetch domains
- Git: L7-enforced read-only (info/refs + git-upload-pack only)
- Process: privilege drop to sandbox:sandbox
- Inference routing template for credential isolation (real API keys
never enter the sandbox, resolved at proxy layer)
* fix: address PR #128 review feedback + add integration guide
Review fixes:
- Use python3 (not python) in usage examples to match binary allowlist
- Fix network_policy → network_policies in comment
- Remove /usr/bin/git from github_api (git uses github.com not
api.github.com; already covered by git_operations policy)
- Remove pip/uv from bash_network_tools (package_registries already
covers their PyPI access; no need for StackOverflow/Wikipedia reach)
- Restructure routes.yaml so commented blocks are indented under
routes: key (uncomment without restructuring YAML)
New: docs/openshell.md covering policy customization, inference routing,
domain allowlisting, MCP subprocess inheritance, and the dual-layer
security model.
|
2026-03-18 18:09:47 -07:00 |
|