Add vendor-only egress and phase policy (D3) - #44

Merged

mchwang merged 20 commits into

mainfrom

codex/agent-isolation-d3

Sep 25, 2026

Commits on Sep 25, 2026

Add vendor-only egress and phase policy
mchwang
committed
abed204
Enforce invocation-scoped agent policy
mchwang
committed
84159b7
Bind adapters and proxy checks to invocation
mchwang
committed
5cbe6d1
Block agent DNS and harden proxy validation
mchwang
committed
22faf3a
Close remaining network lifecycle gaps
mchwang
committed
a5f0c05
Stabilize live Claude marker probe
mchwang
committed
9aa1b89
Port D2 regression tests to named isolation probes

mchwang
and
claude
committed
263cc57
Carry D2 seccomp pinning into the egress proxy

mchwang
and
claude
committed
cd58af2
Own vendor networks on profile failure and bound network cleanup

mchwang
and
claude
committed
52eb54f
Carry D2 deadline, runtime and capture rules into D3

mchwang
and
claude
committed
52af54b
Require captured invocations for policies and serialize Docker suites

mchwang
and
claude
committed
2df056a
Bound network checks by the invocation deadline and reconcile late creates

mchwang
and
claude
committed
5799d70
End CLI option parsing before agent prompts

mchwang
and
claude
committed
b57659e
Keep early CONNECT payload and keep Docker suites out of parallel CI

mchwang
and
claude
committed
c31e790
Capture the network suite invocation after the image build

mchwang
and
claude
committed
9876b04
Bind vendor networks to daemon IDs and validate the proxy restart policy

mchwang
and
claude
committed
e90b579
Apply the proxy header limit to headers only and bound profile checks

mchwang
and
claude
committed
e8e8d57
Clean up failed network setup by ID and bound proxy header buffering

mchwang
and
claude
committed
647a0bb
Run live auth probes through runContainer and guard network teardown

mchwang
and
claude
committed
75fdee9
Authenticate profiles before destructive container cleanup

mchwang
and
claude
committed
a2852e8

Navigation Menu

Add vendor-only egress and phase policy (D3) - #44

Add vendor-only egress and phase policy (D3)#44
mchwang merged 20 commits into
mainfrom
codex/agent-isolation-d3

Commits on Sep 25, 2026

Add vendor-only egress and phase policy

Enforce invocation-scoped agent policy

Bind adapters and proxy checks to invocation

Block agent DNS and harden proxy validation

Close remaining network lifecycle gaps

Stabilize live Claude marker probe

Port D2 regression tests to named isolation probes

Carry D2 seccomp pinning into the egress proxy

Own vendor networks on profile failure and bound network cleanup

Carry D2 deadline, runtime and capture rules into D3

Require captured invocations for policies and serialize Docker suites

Bound network checks by the invocation deadline and reconcile late creates

End CLI option parsing before agent prompts

Keep early CONNECT payload and keep Docker suites out of parallel CI

Capture the network suite invocation after the image build

Bind vendor networks to daemon IDs and validate the proxy restart policy

Apply the proxy header limit to headers only and bound profile checks

Clean up failed network setup by ID and bound proxy header buffering

Run live auth probes through runContainer and guard network teardown

Authenticate profiles before destructive container cleanup