Commit Graph
7 Commits
Author SHA1 Message Date
James Peter 315879ef7d Merge upstream/main: sync upstream, keep local workflows 2025-12-10 07:48:21 +10:00
zhao-oaiandGitHub 9aaed723be fix more typos in execpolicy.md (#7787) 2025-12-09 13:23:14 -08:00
zhao-oaiandGitHub 995bd80747 fix typo (#7626) 2025-12-04 21:48:15 -08:00
zhao-oaiandGitHub 10a4d50d9e Update execpolicy.md (#7595) 2025-12-04 17:55:42 +00:00
zhao-oaiandGitHub b5c0fcd331 Refactor execpolicy fallback evaluation (#7544)
## Refactor of the `execpolicy` crate

To illustrate why we need this refactor, consider an agent attempting to
run `apple | rm -rf ./`. Suppose `apple` is allowed by `execpolicy`.
Before this PR, `execpolicy` would consider `apple` and `pear` and only
render one rule match: `Allow`. We would skip any heuristics checks on
`rm -rf ./` and immediately approve `apple | rm -rf ./` to run.

To fix this, we now thread a `fallback` evaluation function into
`execpolicy` that runs when no `execpolicy` rules match a given command.
In our example, we would run `fallback` on `rm -rf ./` and prevent
`apple | rm -rf ./` from being run without approval.
2025-12-03 23:39:48 -08:00
James Peter 9c909f8395 docs: refresh CLI docs for Every Code rebrand 2025-11-27 11:22:42 +10:00
zhao-oaiandGitHub b2674b7c19 move execpolicy quickstart (#7127) 2025-11-21 19:13:51 -05:00