Repository navigation

feat(policy): add host skill scan verdict check - #48

Merged

senamakel merged 25 commits into

mainfrom

skill-scan-risk-7328

Oct 23, 2026

Merged

feat(policy): add host skill scan verdict check#48
senamakel merged 25 commits into
mainfrom
skill-scan-risk-7328

Commits on Oct 23, 2026
- test(policy): cover host skill scan verdicts and denial precedence
  
  senamakel
  and
  medullabot
  committed
  88f5c4f
- feat(bus): add skill scan verdict check to policy contract
  
  senamakel
  and
  medullabot
  committed
  dae1135
- fix(approval): treat skill scan checks as non-external
  
  senamakel
  and
  medullabot
  committed
  f205ed7
- test(policy): import SkillScanVerdict in engine tests
  
  senamakel
  and
  medullabot
  committed
  f6256bb
- test(tinysecurity-policy): rename loop variable in skill scan verdict test
  
  senamakel
  and
  medullabot
  committed
  9a950f5
- feat(policy): bind skill scan approvals to bundle digest
  
  senamakel
  and
  medullabot
  committed
  fecf3bc
- docs: document host skill-scan contract 1.29
  
  senamakel
  and
  medullabot
  committed
  893ef9c
- test(approval): cover skill scan warn and block verdicts
  
  senamakel
  and
  medullabot
  committed
  5c4abe5
- test(approval): assert denied lifecycle state instead of error
  
  senamakel
  and
  medullabot
  committed
  b8be187
- test(approval): narrow skill scan test to human approval path
  
  senamakel
  and
  medullabot
  committed
  d2d1187
- docs: expand skill-scan contract 1.29 spec
  
  senamakel
  and
  medullabot
  committed
  5599b28
- test(approval): cover skill scan block under auto-approve scope
  
  senamakel
  and
  medullabot
  committed
  a5fdecc
- fix(approval): require human approval for blocked and warned skill scans
  
  senamakel
  and
  medullabot
  committed
  09fdf07
- test(adapter-host): cover host skill scan verdicts before run_workflow
  
  senamakel
  and
  medullabot
  committed
  2237f3b
- refactor(approval): extract blocked skill scan check and flatten conditionals
  
  senamakel
  and
  medullabot
  committed
  758a779
- test(policy): cover skill scan pass without effect check
  
  senamakel
  and
  medullabot
  committed
  e94c723
- fix(policy): stop treating skill scan checks as host tool calls
  
  senamakel
  and
  medullabot
  committed
  4adef47
- docs: clarify skill scan is supplemental and additive for 1.28 hosts
  
  senamakel
  and
  medullabot
  committed
  2f85664
- test(policy): simplify contract version test setup
  
  senamakel
  and
  medullabot
  committed
  8dfbb39
- test(adapter-host-tool): cover skill scan checks in admission-only detection
  
  senamakel
  and
  medullabot
  committed
  7721860
- fix(adapter): treat skill scans as admission-only checks
  
  senamakel
  and
  medullabot
  committed
  d9d2590
- style: reformat admission_only check for readability
  
  senamakel
  and
  medullabot
  committed
  24ef88e
- docs(tinysecurity-module): clarify admission_only doc comment
  
  senamakel
  and
  medullabot
  committed
  0e8e631
- test: isolate process-owned confidential fixtures in child processes
  
  senamakel
  and
  medullabot
  committed
  e7f1b32
- docs(skill-scan): mark contract 1.29 as accepted
  
  senamakel
  and
  medullabot
  committed
  65aa790

Commits

Commits on Oct 23, 2026