Phase 0 + Phase 1 integration: dev → main#44

Merged

pallakatos merged 192 commits into

mainfrom

Apr 27, 2026

Commits on Apr 24, 2026

docs(phase0): security-audit scaffolding, AGT boundary, non-compete, vendored-patch audit

Copilot
authored and
Pal Lakatos-Toth
committed
ci(phase0): six blocking CI gates per implementation-plan §4.4
Copilot
committed
test(phase0): compat-suite skeleton + operator-TUI spec

Copilot
authored and
Pal Lakatos-Toth
committed
feat(providers): Phase 0 provider-contract scaffolds (traits only)
Copilot
committed
docs(audit): reviewer sign-off on provider-seams audit

Pal Lakatos-Toth
and
Copilot
committed
feat(admission): null/noop/disabled-provider VAP + dev-only escape hatch

Copilot
authored and
Pal Lakatos-Toth
committed
feat(cli): 'azureclaw convert' command skeleton (Phase 0, exit-3)

Copilot
authored and
Pal Lakatos-Toth
committed
refactor(operator): extract keymap + status-bar to operator/keymap.ts

Copilot
authored and
Pal Lakatos-Toth
committed
docs(audit): reviewer sign-off on null-provider-admission audit

Pal Lakatos-Toth
and
Copilot
committed
docs: sigs/agent-sandbox compat-mode design doc (Phase 0, no code)

Copilot
authored and
Pal Lakatos-Toth
committed
test(conformance): Phase 0 Signal/X3DH/KNOCK + isolation corpus scaffold

Copilot
authored and
Pal Lakatos-Toth
committed
docs(audit): reviewer sign-off on convert-cli-skeleton audit

Pal Lakatos-Toth
and
Copilot
committed
docs(audit): reviewer sign-off on operator-keymap-extract audit

Pal Lakatos-Toth
and
Copilot
committed
ci: run workflows on dev branch

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase0/foundation-docs' into dev
Pal Lakatos-Toth
committed
Merge branch 'phase0/ci-gates' into dev
Pal Lakatos-Toth
committed
Merge branch 'phase0/compat-suite-skeleton' into dev
Pal Lakatos-Toth
committed
Merge branch 'phase0/provider-trait-scaffolds' into dev
Pal Lakatos-Toth
committed
Merge branch 'phase0/null-provider-admission' into dev
Pal Lakatos-Toth
committed
Merge branch 'phase0/compat-agent-sandbox-design' into dev
Pal Lakatos-Toth
committed
Merge branch 'phase0/conformance-corpus-signal' into dev
Pal Lakatos-Toth
committed
Merge branch 'phase0/kubectl-convert-skeleton' into dev
Pal Lakatos-Toth
committed
Merge branch 'phase0/operator-tui-keymap-extract' into dev
Pal Lakatos-Toth
committed
feat(providers): outage semantics — pure decision module + controller validator

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/provider-outage-modes' into dev
Pal Lakatos-Toth
committed
feat(telemetry): OTel GenAI SemConv constants + typed attribute bag

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/otel-genai-semconv' into dev

Pal Lakatos-Toth
and
Copilot
committed
docs: OWASP MCP Top 10 (2025) controls matrix

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/owasp-mcp-top10-doc' into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: ClawSandbox observedGeneration + Conditions[]

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/minimal-conditions into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: extract DrainState into handoff/drain.rs submodule

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/hotspot-handoff-split into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: core VAP set — pod exec ban + sandbox posture lock

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/vap-pod-exec-ban into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: extract PendingHandoffStore into handoff/pending.rs

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/hotspot-handoff-pending into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1(hotspot): extract HandoffTokenStore to handoff/token.rs

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/hotspot-handoff-token into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1(provider): impl PolicyDecisionProvider on Governance directly

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/policy-provider-in-tree' into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1(provider): impl AuditSink on Governance directly

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/audit-sink-in-tree' into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1(provider): impl SigningProvider on Governance directly

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/signing-provider-in-tree' into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1(controller): stamp Degraded conditions on validation failures

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/minimal-conditions-audit' into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: clarify MeshProvider as plugin-side only (no router impl)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mesh-seam-clarification into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: route handoff.rs audit emissions through AuditSink trait

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/audit-sink-migrate-handoff into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: migrate inference policy call-sites to PolicyDecisionProvider trait

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/policy-provider-migrate-inference into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: split inference.rs hotspot — extract translate helpers

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/hotspot-pass2-inference-split into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: scaffold inference-router/src/mcp/ for MCP 2026 Streamable HTTP

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mcp-2026-scaffold into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: scaffold A2A 1.0.0 module (agent_card, error, signature)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-1.0.0-scaffold into dev
Pal Lakatos-Toth
committed
phase1: ADR 0001 — A2A ingress (gateway-only, surgical opt-in)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-ingress-adr into dev
Pal Lakatos-Toth
committed
phase1: A2A module isolation CI gate + forbid(unsafe_code)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-module-isolation-ci into dev
Pal Lakatos-Toth
committed
phase1: McpServer CRD scaffold (schema-only, no reconciler)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mcp-server-crd-scaffold into dev
Pal Lakatos-Toth
committed
phase1: ToolPolicy CRD scaffold (schema-only, no reconciler)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/tool-policy-crd-scaffold into dev
Pal Lakatos-Toth
committed
phase1: VAP/MAP set additions (dev-only label + seccomp auto-stamp)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/vap-map-set into dev
Pal Lakatos-Toth
committed
phase1: azureclaw a2a list-exposed/schema CLI scaffold

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-cli-list-exposed into dev
Pal Lakatos-Toth
committed
phase1: ClawSandbox.spec.a2a inbound exposure schema (ADR-0001 D6)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/clawsandbox-a2a-spec into dev
Pal Lakatos-Toth
committed
phase1: conformance corpus scaffolds — A2A / MCP 2026 / AP2 / OAuth 2.1

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/conformance-corpus-a2a into dev
Pal Lakatos-Toth
committed
phase1: docs/internal-boundaries.md per-CRD posture rows

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/docs-internal-boundaries into dev
Pal Lakatos-Toth
committed
phase1: A2A 'no public router exposure' VAP + Cilium L7 CCNP

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-cilium-vap-isolation into dev
Pal Lakatos-Toth
committed
phase1: A2A JWS + base64url fuzz targets

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-fuzz-targets into dev
Pal Lakatos-Toth
committed
phase1: session checkpoint — 12 A2A/Phase-1 scaffolds landed

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/session-checkpoint into dev
Pal Lakatos-Toth
committed

Commits on Apr 25, 2026

phase1: ClawSandbox.spec.upstreamCompatibility scaffold (schema-only)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/upstream-translate-mode into dev
Pal Lakatos-Toth
committed
phase1: A2A 1.0.0 AgentCard sign/verify — end-to-end

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-card-sign-verify into dev
Pal Lakatos-Toth
committed
phase1: MCP initialize JSON-RPC handler — end-to-end

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mcp-initialize-handler into dev
Pal Lakatos-Toth
committed
phase1: MCP Streamable HTTP request pipeline — end-to-end

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mcp-request-pipeline into dev
Pal Lakatos-Toth
committed
phase1: A2A AgentCard server-side build pipeline — end-to-end

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-card-server into dev
Pal Lakatos-Toth
committed
phase1: MCP OAuth 2.1 access-token verifier — RFC 8725 BCP

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mcp-oauth21-verifier into dev
Pal Lakatos-Toth
committed
phase1: MCP tools/list + tools/call dispatch — pipeline-wired

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mcp-tools-dispatch into dev
Pal Lakatos-Toth
committed
phase1: A2A inbound AgentCard verification pipeline — pure function

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-card-verifier into dev
Pal Lakatos-Toth
committed
phase1: A2A JSON-RPC method dispatch — message/send + tasks/get + tasks/cancel

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-jsonrpc-dispatch: A2A JSON-RPC dispatch + 19 tests
Pal Lakatos-Toth
committed
phase1: A2A AP2 commerce mandate validation kernel

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-ap2-mandates: AP2 commerce mandate validation + 19 tests
Pal Lakatos-Toth
committed
phase1: A2A trust-store cache — snapshot hot-reload for kid → VerifyingKey

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-trust-store-cache: snapshot trust-anchor cache + 15 tests
Pal Lakatos-Toth
committed
phase1: AP2 conformance corpus — 14 wire-format fixtures + coverage floor

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-ap2-conformance-fixtures: AP2 fixture corpus + coverage floor
Pal Lakatos-Toth
committed
phase1: bind POST /mcp axum route — 13 tests, sub-router state

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mcp-route-binding: POST /mcp axum binding + 13 tests
Pal Lakatos-Toth
committed
phase1: bind A2A axum routes — agent.json + POST /a2a + 15 tests

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/a2a-route-binding: A2A axum routes + 15 tests
Pal Lakatos-Toth
committed
phase1: a2a agent-card verifier conformance corpus

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/a2a-card-verifier-conformance' into dev
Pal Lakatos-Toth
committed
phase1: AP2 IntentMandate detached-JWS sign/verify primitive

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/ap2-mandate-signing' into dev
Pal Lakatos-Toth
committed
phase1: A2AAgent CRD spec to TrustAnchor projection function

Pal Lakatos-Toth
and
Copilot
committed
Merge branch 'phase1/a2a-agent-projection' into dev
Pal Lakatos-Toth
committed
phase1: wire AP2 mandate verify into validate_payment_attempt

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/ap2-mandate-verify-wired into dev
Pal Lakatos-Toth
committed
phase1: OAuth 2.1 bearer-token verification as a tower::Layer

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/oauth-tower-layer into dev
Pal Lakatos-Toth
committed
phase1: a2a trust-store hot-reload integration test

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/trust-store-hot-reload-integration

Pal Lakatos-Toth
and
Copilot
committed
phase1: wire OAuthLayer into protected_mcp_route

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mcp-route-oauth-wiring

Pal Lakatos-Toth
and
Copilot
committed
phase1: trust-store snapshot rebuild orchestrator

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/trust-store-rebuild-orchestrator

Pal Lakatos-Toth
and
Copilot
committed
phase1: CEL admission validations on McpServer + ToolPolicy CRDs

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/crd-cel-validations

Pal Lakatos-Toth
and
Copilot
committed
phase1: MCP 2026 negative-only edge-case integration tests

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mcp-negative-edge-cases

Pal Lakatos-Toth
and
Copilot
committed
phase1(ap2): add type-safe MandateTrustStore wrapper

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/ap2-mandate-trust-store: type-safe AP2 mandate-issuer trust store

Pal Lakatos-Toth
and
Copilot
committed
phase1(ap2): wire signed-mandate verification into message/send

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/ap2-message-send-wiring: AP2 verification at A2A message/send

Pal Lakatos-Toth
and
Copilot
committed
phase1: policy-envelope hot-reload core (pure transition + container)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/policy-envelope-hot-reload (PR 40): pure hot-reload core (17 tests, 561->578)
Pal Lakatos-Toth
committed
phase1: extract handoff::crypto submodule (hotspot pass #2)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/handoff-crypto-extract (PR 41): handoff crypto submodule extraction (mod.rs 2075->1954, +7 tests)
Pal Lakatos-Toth
committed
phase1: extract handoff::auth submodule (mod.rs under 1800 cap)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/handoff-auth-extract (PR 42): handoff auth submodule (mod.rs 1954->1770, under Phase 1 1800 cap)
Pal Lakatos-Toth
committed
phase1: extract spawn::docker submodule (under Phase 1 900 cap)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/spawn-docker-extract (PR 43): spawn docker submodule (1199->762, under Phase 1 900 cap)
Pal Lakatos-Toth
committed
phase1: extract RateLimiter into inference-router/src/rate_limiter.rs

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/governance-rate-limiter-extract (PR 44): RateLimiter extracted from governance.rs (1252->1152)
Pal Lakatos-Toth
committed
phase1: extract BehaviorMonitor into inference-router/src/behavior_monitor.rs

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/governance-behavior-monitor-extract (PR 45): BehaviorMonitor extracted from governance.rs (1152->1014)
Pal Lakatos-Toth
committed
phase1: extract routes/handoff payload handlers into submodule

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/routes-handoff-payload-extract (PR 46): handoff payload handlers extracted (1570->872)
Pal Lakatos-Toth
committed
phase1: extract trust-ops impl into governance/trust_ops.rs

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/governance-trust-ops-extract (PR 47): trust-ops extracted; governance/mod.rs 837 (under Phase 1 900 cap)
Pal Lakatos-Toth
committed
phase1: split controller/src/mesh_peer.rs (1970->1170, under 1200 cap)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/mesh-peer-offload-extract: mesh_peer.rs split (1970->1170 + offload 718 + pair 124, under Phase 1 cap)
Pal Lakatos-Toth
committed
phase1: split controller/src/reconciler.rs (2326->1464, under 1500 cap)

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/reconciler-tests-extract: reconciler.rs split (2326->1464, under Phase 1 cap)
Pal Lakatos-Toth
committed
phase1: CI greenup + Phase 0/1 gap review

Pal Lakatos-Toth
and
Copilot
committed
Merge phase1/ci-greenup-and-review into dev

Pal Lakatos-Toth
and
Copilot
committed
phase1: runtime-compat fixes (plugin ESM, preflight, policy dir, admin-token)

Pal Lakatos-Toth
and
Copilot
committed
phase1: extract Foundry discovery from plugin.ts (LOC) + rustfmt

Pal Lakatos-Toth
and
Copilot
committed
phase1: pre-stage OpenClaw bundled-runtime-deps + sub-agent npm 403 fix

Pal Lakatos-Toth
and
Copilot
committed
phase1: controller mesh-peer exponential reconnect backoff + jitter

Pal Lakatos-Toth
and
Copilot
committed
phase1: copy dist/core/ subdir into sandbox plugin (fix a33165b regression)

Pal Lakatos-Toth
and
Copilot
committed

Commits on Apr 26, 2026

phase1: PR #44 CI fixes (digest bump, rustfmt 1.95, audit signoffs)

Pal Lakatos-Toth
and
Copilot
committed
phase1: fix sub-agent registry lookup (sibling mesh_send + discover)

Pal Lakatos-Toth
and
Copilot
committed
phase1: AGT_SKIP_ENTRA toggle + multi-arch Azure Linux base

Pal Lakatos-Toth
and
Copilot
committed
fix(controller): break reconcile loop, register controller mesh peer, fix postgres deadlock

Pal Lakatos-Toth
and
Copilot
committed
fix(plugin): refresh stale AMID after sub-agent identity rotation

Pal Lakatos-Toth
and
Copilot
committed
fix(helm): gate seccomp MAP behind flag + fix VAP message line-break

Pal Lakatos-Toth
and
Copilot
committed
fix(helm): drop optional-chain inside has() in null-provider VAP

Pal Lakatos-Toth
and
Copilot
committed
fix(sandbox-base): handle multiple staged openclaw versions in pre-stage check

Pal Lakatos-Toth
and
Copilot
committed
docs(vap): document container-scoped exec ban rationale

Pal Lakatos-Toth
and
Copilot
committed
fix(sandbox): mirror staged deps to writable tmpfs for RO-rootfs pods

Pal Lakatos-Toth
and
Copilot
committed
fix(plugin): pre-discovery must not pin sub-agent AMID into TTL cache

Pal Lakatos-Toth
and
Copilot
committed
fix(plugin): push peer trust to router on first successful mesh send

Pal Lakatos-Toth
and
Copilot
committed
fix(plugin): bypass delegateToNativeAgent (sessions_spawn denied)

Pal Lakatos-Toth
and
Copilot
committed
Revert "fix(plugin): bypass delegateToNativeAgent (sessions_spawn denied)"
Pal Lakatos-Toth
committed
Reapply "fix(plugin): bypass delegateToNativeAgent (sessions_spawn denied)"
Pal Lakatos-Toth
committed

Commits on Apr 27, 2026

fix(plugin): resend mesh task on reply timeout if peer AMID changed

Pal Lakatos-Toth
and
Copilot
committed
fix(plugin): sub-agent mesh_send/discover use router-proxied registry

Pal Lakatos-Toth
and
Copilot
committed
fix(cli): surface kubectl stderr on port-forward failure in connect

Pal Lakatos-Toth
and
Copilot
committed
fix(controller): plumb OPENCLAW_GATEWAY_TOKEN via secretKeyRef

Pal Lakatos-Toth
and
Copilot
committed
fix(plugin): gate heavy runtime side-effects on registrationMode==full

Pal Lakatos-Toth
and
Copilot
committed
fix(sandbox): unblock built-in image_generate provider on loopback router

Pal Lakatos-Toth
and
Copilot
committed
refactor(plugin): extract router-client helpers to core/router-client.ts

Pal Lakatos-Toth
and
Copilot
committed
docs(security-audits): retroactive audit for image_generate loopback unblock (97ef710)

Pal Lakatos-Toth
and
Copilot
committed
feat(controller): add periodic fedcred reaper for orphan GC

Pal Lakatos-Toth
and
Copilot
committed
docs: pre-merge revamp for PR #44

Pal Lakatos-Toth
and
Copilot
committed
docs: scrub references to gitignored internal plans

Pal Lakatos-Toth
and
Copilot
committed
docs: scrub internal AGT/MSFT-product coordination from public docs

Pal Lakatos-Toth
and
Copilot
committed
docs: gitignore docs/internal/ — remove all public references to internal docs

Pal Lakatos-Toth
and
Copilot
committed
docs: reword 'provider: null/noop/disabled' prose to satisfy ci/no-null-provider-prod gate

Pal Lakatos-Toth
and
Copilot
committed
docs: document MAP feature-gate caveat + fix rustfmt drift

Pal Lakatos-Toth
and
Copilot
committed