feat(prover): add standalone policy boundary checker - #3289

Merged

johnnygreco merged 24 commits into

mainfrom

2109-standalone-policy-prover/jg

Sep 17, 2026

Commits on Sep 17, 2026

feat(prover): add standalone policy maximum checker
johnnygreco
committed
312693f
refactor(prover): simplify check scope schema
johnnygreco
committed
3d95920
fix(prover): align containment and cancellation with runtime
johnnygreco
committed
3fca183
fix(prover): stabilize containment checks in CI
johnnygreco
committed
9db6d29
test(prover): avoid solver in fast-path guard test
johnnygreco
committed
a5bbe42
fix(prover): align string containment with runtime
johnnygreco
committed
0bc9007
fix(prover): reject ambiguous z3 string escapes
johnnygreco
committed
d5849ab
fix(prover): align containment with runtime boundaries
johnnygreco
committed
2b77cad
fix(prover-cli): harden cancellation and invalid input
johnnygreco
committed
de96dcb
feat(packaging): install policy prover with OpenShell
johnnygreco
committed
02bd1e9
docs(prover): clarify installation and check results
johnnygreco
committed
7cb6e9d
docs(build): describe prover distribution directly
johnnygreco
committed
6d532d1
refactor(prover): rename maximum policy to boundary
johnnygreco
committed
78e2dce
refactor(prover): localize fail-closed validation
johnnygreco
committed
63661e4
test(prover): cover fail-closed CLI surfaces
johnnygreco
committed
e8a1ece
test(prover): allow CI load for REST solver proof
johnnygreco
committed
dd8f606
fix(prover): use canonical policy schema for containment
johnnygreco
committed
1d484f7
fix(prover): preserve uncertainty for runtime binary globs
johnnygreco
committed
ad5ccdc
fix(prover): bound policy validation work
johnnygreco
committed
45f350e
docs(prover): document validation resource limits
johnnygreco
committed
7efb441
fix(prover): make containment API extensible
johnnygreco
committed
fd20ae4
docs(prover): define containment API contract
johnnygreco
committed
080b4be
fix(ci): integrate prover with consolidated builds
johnnygreco
committed
6545652
fix(ci): declare release packaging dependency
johnnygreco
committed
8f9fd55

Navigation Menu

feat(prover): add standalone policy boundary checker - #3289

feat(prover): add standalone policy boundary checker#3289
johnnygreco merged 24 commits into
mainfrom
2109-standalone-policy-prover/jg

Commits on Sep 17, 2026

feat(prover): add standalone policy maximum checker

refactor(prover): simplify check scope schema

fix(prover): align containment and cancellation with runtime

fix(prover): stabilize containment checks in CI

test(prover): avoid solver in fast-path guard test

fix(prover): align string containment with runtime

fix(prover): reject ambiguous z3 string escapes

fix(prover): align containment with runtime boundaries

fix(prover-cli): harden cancellation and invalid input

feat(packaging): install policy prover with OpenShell

docs(prover): clarify installation and check results

docs(build): describe prover distribution directly

refactor(prover): rename maximum policy to boundary

refactor(prover): localize fail-closed validation

test(prover): cover fail-closed CLI surfaces

test(prover): allow CI load for REST solver proof

fix(prover): use canonical policy schema for containment

fix(prover): preserve uncertainty for runtime binary globs

fix(prover): bound policy validation work

docs(prover): document validation resource limits

fix(prover): make containment API extensible

docs(prover): define containment API contract

fix(ci): integrate prover with consolidated builds

fix(ci): declare release packaging dependency