[v2] Implement TransitiveCapabilityResolver

[SHAURYASANYAL3]

Phase 1: Capability Lattice

The Context

A major flaw in regex-based safety engines is capability leakage. If an agent is allowed to run python, it can effectively bypass network restrictions by running import os; os.system('curl evil.com'). The Transitive Capability Resolver tracks this leakage structurally.

Tasks

• Implement TransitiveCapabilityResolver to calculate the "Upper Bound" of any given capability.
• Define rules for high-risk capabilities. For example, granting exec("python") or exec("bash") must transitively grant FULL_ACCESS.
• Integrate this resolver into the CapabilityChecker so that if an agent attempts an action whose transitive upper bound exceeds its declared capabilities, the action is hard-blocked.
• Write test cases specifically for execution leakage (e.g., proving bash -c "..." is correctly blocked if full access isn't declared).

Part of Epic #651

[prasiddhi-105]

Hiii please assign this issue to me under SSOC'26!!!

[SHAURYASANYAL3]

@prasiddhi-105 As mentioned on the other thread, we limit contributors to 2 active issues at a time. Let's get the first two sorted first!

[SHAURYASANYAL3]

Hey @prasiddhi-105, we just assigned you to two other issues. Since we have a strict limit of 2 active issues per contributor, we can't assign you to this one right now. Once you finish your current tasks, feel free to come back!

[arcgod-design]

Hi @SHAURYASANYAL3! I'd love to implement this for AgentWatch v2 under SSoC '26.

My Approach:

• Implement TransitiveCapabilityResolver that maintains a capability graph with transitive rules (e.g., exec("python") → FULL_ACCESS)
• Build a BFS/DFS traversal over the graph to compute the "Upper Bound" capability set for any given capability
• Integrate the resolver into CapabilityChecker so any declared action is checked against its transitive upper bound
• Hard-block actions where the transitive upper bound exceeds declared capabilities
• Write test cases proving bash -c "..." is blocked when FULL_ACCESS isn't declared

Could you please assign this to me (@arcgod-design)? Ready to start immediately!