All pull requests

Pull requests

• feat(policy): refuse a temporal predicate that names an action group

  Area - policy-engineenhancement
  #232·ferdingler opened Oct 30, 2026Collaborator·4 of 8 tasks·

  ·

• feat(release): publish Linux ARM64 in stable releases

  Area - Releaseenhancement
  #231·kevin-orellana opened Oct 30, 2026Collaborator·7 of 8 tasks·

  ·

• feat(egress): relay WebSocket through the TLS tunnel

  Area - Egress/Credsenhancement
  #230·siwachabhi opened Oct 30, 2026·6 of 8 tasks·

  ·

• fix(egress-gateway): fold a resource URI's fragment and empty query

  Area - Egress/CredsArea - policy-enginebug
  #229·abhisheksp opened Oct 30, 2026Contributor·8 tasks done·

  ·
  3

• fix(policy): hold a tool call whose name carries a quote or a backslash

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)bug
  #228·abhisheksp opened Oct 30, 2026Contributor·8 tasks done·

  ·
  1

• fix(policy): fold the NAT64 and translated spellings of an address

  Area - Egress/CredsArea - policy-enginebug
  #227·abhisheksp opened Oct 30, 2026Contributor·8 tasks done·

  ·
  3

• feat(credentials): sign AWS requests with the compute host execution role

  Area - Egress/Credsenhancement
  #226·leo237 opened Oct 30, 2026·8 tasks done·

  ·
  4

• fix(policy): clear the degraded mark when a complete policy bundle installs

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)bug
  #225·abhisheksp opened Oct 29, 2026Contributor·8 tasks done·

  ·
  6

• fix(policy): refuse a degraded tool call that the committed schema declares

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)bug
  #224·abhisheksp opened Oct 29, 2026Contributor·8 tasks done·

  ·
  7

• test: probe macOS failure propagation (DO NOT MERGE)

  Area - Releasechore
  #223·kevin-orellana opened Oct 29, 2026Collaborator·5 of 8 tasks·

  ·

• docs: define the external site publication contract

  Area - Releasedocumentation
  #222·tmoreton opened Oct 29, 2026·9 tasks done·

  ·

• feat(policy): generate the Cedar schema of a tool pack

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancementstrands-running
  #220·ferdingler opened Oct 29, 2026Collaborator·8 tasks done·

  ·
  13

• refactor(egress): read and write HTTP with hyper, and delete the hand-written HTTP/1.1 code

  Area - Egress/Credschore
  #218·siwachabhi opened Oct 29, 2026·6 of 8 tasks·

  ·
  4

• feat(box): add reload library API

  Area - policy-engineenhancement
  #217·gautamsirdeshmukh opened Oct 29, 2026Contributor·7 of 8 tasks·

  ·
  4

• ci: bump taiki-e/install-action from 2.87.29 to 2.87.31

  choredependenciesgithub_actions
  #209·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• ci: bump Swatinem/rust-cache from 2.9.2 to 2.9.3

  choredependenciesgithub_actions
  #208·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• feat(release): notarize and staple the macOS package before publication

  Area - Releaseenhancement
  #206·hanaduy opened Oct 28, 2026Contributor·6 of 8 tasks·

  ·
  5

• feat(box): name a stdio MCP server's alias with an optional alias key

  Area - Tool Containment (Binaries/Local MCP)enhancement
  #204·notowen333 opened Oct 28, 2026Contributor·2 of 8 tasks·

  ·
  3

• ci(rust): bump the production-minor group across 2 directories with 15 updates

  choredependencies
  #202·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  1

• test: cover denied executable relocation through the broker

  #201·kevin-orellana opened Oct 28, 2026Collaborator·8 tasks done·

  ·
  2

• fix: refuse unsafe Linux file permission requests

  #199·kevin-orellana opened Oct 28, 2026Collaborator·6 of 8 tasks·

  ·
  3

• test: add portable Linux target validation

  #198·kevin-orellana opened Oct 28, 2026Collaborator·8 tasks done·

  ·
  11

• docs: state Linux native network access in operator guides

  #196·kevin-orellana opened Oct 28, 2026Collaborator·6 of 8 tasks·

  ·
  6

• feat: add Linux filesystem policy operations

  #193·kevin-orellana opened Oct 27, 2026Collaborator·6 tasks done·

  ·
  6

• feat: add Linux native kernel mechanisms

  #191·kevin-orellana opened Oct 27, 2026Collaborator·6 tasks done·

  ·
  5