Skip to content

feat(workbench): add authenticated HTTP checking policies - #140

Merged
DamianReeves merged 2 commits into
mainfrom
DamianReeves/http-capability-policies
Oct 18, 2026
Merged

DamianReeves merged 2 commits into
mainfrom
DamianReeves/http-capability-policies

Conversation

@DamianReeves

@DamianReeves DamianReeves commented Oct 18, 2026 •

Copy link
Copy Markdown
Member

Authenticated HTTP executions can now offer the same explicit checking policies as standalone and desktop evaluation. The exact host 0.2.0-draft.2 mapping captures the selected Scheme provider, policy, inputs and public boundary before acceptance. Real isolated workers claim that plan once, and the client validates returned plans and typed terminals against the captured selection.

The connected Model Explorer enables policy controls only for a qualified offer. Frozen strict HTTP and native mappings retain their contracts. Rust connected v1 still advertises executions:false; its actual authentication, Gleam compilation/generation and workspace behavior are qualified separately.

Validation:

  • Independent parent MCK23–25: 116 fixed cases, ten debug/release lanes, 406 observations.
  • Frozen boundary and native client regression kits, focused core/provider/client tests, and 156 Node tests.
  • Actual Chromium and packaged Proton on macOS Apple Silicon: authenticated gateway/provider, JSON/Ion, immutable policy/inputs, reached unsupported code, cancellation, reconnect, cleanup and accepted-but-lost submit reply.
  • Near-1-MiB complete acceptance serialization, initialization and reconnect concurrency regressions.
  • Full repository check, required lint/format/validation, TypeScript and updated CI policy self-tests passed.

Beads: morphir-etg2.16.6. The parent protocol schemas, normative HTML and independent fixtures ship in finos/morphir#1064. HTML plans and evidence stay in beads and ignored .dev/ artifacts.

Negotiate an exact authenticated HTTP mapping and retain the selected
Scheme plan through acceptance, worker claims and reconnection.

Qualify boundaries, clients and actual provider workers with independent
parent MCK fixtures; preserve frozen strict and native contracts.
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-18T07:16:50.061077Z d40049b PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@DamianReeves
DamianReeves merged commit b544fc4 into main Oct 18, 2026
54 checks passed
@DamianReeves
DamianReeves deleted the DamianReeves/http-capability-policies branch October 18, 2026 08:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant