hanzoai/bot
2
0
Fork 0
mirror of https://github.com/hanzoai/bot.git synced 2026-10-30 17:24:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
fix/android-build-errors
bot/docs/experiments/plans/group-policy-hardening.md
T
zooqueenandHanzo Dev a41549e33b fix: add missing doc pages and format changelogs 
Create grammy.md and group-policy-hardening.md to resolve 10 broken
doc links. Format 7 auto-generated CHANGELOG.md files.

Co-authored-by: Hanzo Dev <[email protected]>
2026-02-27 21:41:42 -08:00

1.0 KiB
Raw Permalink Blame History

summary, read_when, title
summary read_when title
Hardening plan for Telegram group allowlist and policy enforcement
Working on Telegram group allowlists or policy enforcement
Group Policy Hardening

Group Policy Hardening

This plan covers hardening the Telegram group allowlist and policy enforcement logic.

Goals

  • Enforce strict allowlist matching for group chats
  • Prevent unauthorized groups from receiving bot responses
  • Add audit logging for allowlist policy decisions
  • Support wildcard and pattern-based group allowlists

Current State

Group messages are gated by the channels.telegram.allowlist configuration. The allowlist supports explicit chat IDs and usernames.

Proposed Changes

  1. Validate allowlist entries on config load (reject malformed patterns)
  2. Log policy decisions at debug level for audit trails
  3. Add support for group title pattern matching
  4. Harden the check to prevent bypass via forwarded messages

References

Reference in New Issue View Git Blame Copy Permalink