Complete tracked-file inventory
Source, by file.
335 tracked regular files at 71e9d9fe9570f7b61770b9d5cca247d8ad269d1e. Generated from Git, Python syntax trees and SHA-256 hashes—not from filenames guessed by the webpage.
Python entries include top-level functions, classes and class methods with source-line links, plus syntactic imports. An import is not proof that a component is active on a production path. Local untracked files are not published.
| File and source | Role | Symbols and imports |
|---|---|---|
.github/ISSUE_TEMPLATE/bug_report.md392 bytes · SHA-256 | Project documentation | No Python API symbols. |
.github/ISSUE_TEMPLATE/config.yml246 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
.github/PULL_REQUEST_TEMPLATE.md443 bytes · SHA-256 | Project documentation | No Python API symbols. |
.github/dependabot.yml394 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
.github/workflows/formal.yml2,200 bytes · SHA-256 | CI or publishing workflow | No Python API symbols. |
.github/workflows/freshclam.yml2,789 bytes · SHA-256 | CI or publishing workflow | No Python API symbols. |
.github/workflows/guest-recipe.yml2,221 bytes · SHA-256 | CI or publishing workflow | No Python API symbols. |
.github/workflows/guest-release.yml13,181 bytes · SHA-256 | CI or publishing workflow | No Python API symbols. |
.github/workflows/microvm.yml1,518 bytes · SHA-256 | CI or publishing workflow | No Python API symbols. |
.github/workflows/pages.yml6,671 bytes · SHA-256 | CI or publishing workflow | No Python API symbols. |
.github/workflows/pytest.yml5,726 bytes · SHA-256 | CI or publishing workflow | No Python API symbols. |
.gitignore1,019 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
COMPLIANCE.md40,755 bytes · SHA-256 | Project documentation | No Python API symbols. |
CONTRIBUTING.md2,898 bytes · SHA-256 | Project documentation | No Python API symbols. |
LICENSE17,984 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
README.md6,526 bytes · SHA-256 | Project documentation | No Python API symbols. |
SECURITY.md1,996 bytes · SHA-256 | Project documentation | No Python API symbols. |
THIRD_PARTY_NOTICES.md3,250 bytes · SHA-256 | Project documentation | No Python API symbols. |
benchmarks/20260920/attack-summary.csv1,265 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
benchmarks/20260920/benchmark.json5,773 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
benchmarks/20260920/host.txt244 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
benchmarks/20260920/hotpath.csv248 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
certification/open_model_certification.json4,479 bytes · SHA-256 | Recorded verification artifact; read its own scope and revision | No Python API symbols. |
certification/verification.json722 bytes · SHA-256 | Recorded verification artifact; read its own scope and revision | No Python API symbols. |
compliance/README.md1,490 bytes · SHA-256 | Project documentation | No Python API symbols. |
deploy/cloudflare-audit/README.md6,135 bytes · SHA-256 | Project documentation | No Python API symbols. |
deploy/cloudflare-audit/package.json270 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
deploy/cloudflare-audit/prepare_build.py1,724 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | prepare L12 Imports: |
deploy/cloudflare-audit/schema.sql348 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
deploy/cloudflare-audit/src/index.ts5,099 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
deploy/cloudflare-audit/wrangler.jsonc299 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
docs/ADAPTER_VALIDATION.md3,852 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/BENCHMARK_20260920.md3,119 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/BRANCH_AUDIT_20260922.md9,467 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/BRANCH_INTEGRATION.md2,978 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/BRAND.md3,814 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/CODESPACES_DEPLOYMENT_CHECKS.md4,333 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/CODESPACES_VM_AND_KEY_CHECKS.md6,886 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/CROSS_PLATFORM_SECURITY.md2,733 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/DISTRIBUTION.md3,902 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/GOVERNED_AGENT_RUN.md9,412 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/HARDENING.md2,957 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/HARDWARE_AUTHORITY.md13,976 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/HUMAN_APPROVAL.md7,286 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/MICROVM_INTEGRATION_REPORT.md12,813 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/MICROVM_R3_FOLLOWUP.md5,356 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/MICROVM_RELEASE_STATUS.md4,191 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/OCTOBER_REVIEW.md5,574 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/PRESENTATION.md3,120 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/PRODUCTION_EXTERNAL_AUDIT_EVIDENCE_20260920.md1,830 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/PRODUCTION_SECURITY.md8,237 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/PUBLICATION.md1,918 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/RELEASE_0.2.0rc1.md5,314 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/REPRODUCIBLE_DEPLOYMENT.md15,808 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/SECURITY_CLAIMS.md7,974 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/SESSION_EXPORT_TRUST_BOUNDARIES.md4,323 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/VALIDATION_20260922.md23,601 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/VALIDATION_20260923.md5,224 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/WEBSITE_REDESIGN_MAP.md12,209 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/WEBSITE_REDESIGN_VALIDATION.md1,939 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/evidence/branch-integration-20260923.json14,060 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/evidence/candidate-428db9c.json4,732 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/evidence/governed-agent-20260922/README.md4,901 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/evidence/governed-agent-20260922/source-manifest.json23,443 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/evidence/governed-agent-20260922/summary.json4,347 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/evidence/hardware-20260923/manual-drain.py820 bytes · SHA-256 | Project documentation | No Python API symbols. Imports: |
docs/multiagent.md6,437 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/IEEEtran.cls281,957 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/LICENSE17,984 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/README.md4,889 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/SUBMISSION.md2,691 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/build.py12,445 bytes · SHA-256 | Project documentation | digest L21 sources L25 validate_inputs L37 latex L57 tables L62 figures L86 verify_publication L116 build L143 main L208 Imports: |
docs/papers/bull-ii/coverage.json4,145 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence-manifest.json7,304 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/ADAPTER_VALIDATION.md3,852 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/BENCHMARK_20260920.md3,119 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/DISTRIBUTION.md3,902 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/GOVERNED_AGENT_RUN.md9,412 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/HARDWARE_AUTHORITY.md13,976 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/HUMAN_APPROVAL.md7,286 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/MICROVM_INTEGRATION_REPORT.md12,813 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/PRODUCTION_EXTERNAL_AUDIT_EVIDENCE_20260920.md1,830 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/SESSION_EXPORT_TRUST_BOUNDARIES.md4,323 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/VALIDATION_20260922.md23,601 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/VALIDATION_20260923.md4,084 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/evidence/candidate-428db9c.json4,732 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/evidence/governed-agent-20260922/source-manifest.json23,443 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/evidence/governed-agent-20260922/summary.json4,347 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/docs/evidence/hardware-20260923/manual-drain.py820 bytes · SHA-256 | Project documentation | No Python API symbols. Imports: |
docs/papers/bull-ii/evidence/site/data/benchmarks/20260920/attack-summary.csv1,265 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/site/data/benchmarks/20260920/benchmark.json5,773 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/site/data/benchmarks/20260920/hotpath.csv248 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/site/data/hardware/20260923-gestures.json3,052 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/site/data/validation/603365e.json9,347 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/evidence/validation-ab53f56.json14,406 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/figures/audit-flow.svg2,147 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/figures/data-flow.svg2,967 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/figures/kernel-layers.svg1,613 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/figures/microvm-io.svg2,731 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/layout-reference.tex63,083 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/paper.tex52,586 bytes · SHA-256 | Project documentation | No Python API symbols. |
docs/papers/bull-ii/plot_evidence.py3,253 bytes · SHA-256 | Project documentation | extra_figures L6 Imports: |
docs/papers/bull-ii/requirements.txt336 bytes · SHA-256 | Project documentation | No Python API symbols. |
examples/adversary_capture_example.py2,832 bytes · SHA-256 | Example request data | claude_agent L16 gpt_agent L29 llama_agent L40 main L49 Imports: |
examples/blocked_action.json345 bytes · SHA-256 | Example request data | No Python API symbols. |
examples/governed-agent/input.txt43 bytes · SHA-256 | Example request data | No Python API symbols. |
examples/multiagent_example.py1,062 bytes · SHA-256 | Example request data | main L9 Imports: |
examples/safe_action.json345 bytes · SHA-256 | Example request data | No Python API symbols. |
firmware/CMakeLists.txt814 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/PICO_EXAMPLES_LICENSE.txt1,489 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/src/boot_button.c893 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/src/boot_clicks.c1,748 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/src/boot_clicks.h562 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/src/main.c6,106 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/src/state_machine.c2,159 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/src/state_machine.h783 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/src/status_pixel.pio191 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/src/tusb_config.h384 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/src/usb_descriptors.c1,647 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/tests/boot_clicks_test.c2,196 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
firmware/tests/state_machine_test.c2,229 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
formal/tla/BullApproval.cfg139 bytes · SHA-256 | Bounded state-machine model or model-checking configuration | No Python API symbols. |
formal/tla/BullApproval.tla2,405 bytes · SHA-256 | Bounded state-machine model or model-checking configuration | No Python API symbols. |
formal/tla/BullRuntime.cfg438 bytes · SHA-256 | Bounded state-machine model or model-checking configuration | No Python API symbols. |
formal/tla/BullRuntime.tla10,202 bytes · SHA-256 | Bounded state-machine model or model-checking configuration | No Python API symbols. |
formal/tla/BullSessionAudit.cfg232 bytes · SHA-256 | Bounded state-machine model or model-checking configuration | No Python API symbols. |
formal/tla/BullSessionAudit.tla3,861 bytes · SHA-256 | Bounded state-machine model or model-checking configuration | No Python API symbols. |
microvm/README.md9,166 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | No Python API symbols. |
microvm/audit/README.md5,313 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | No Python API symbols. |
microvm/audit/local-test.sh802 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | No Python API symbols. |
microvm/config/defaults.env1,420 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | No Python API symbols. |
microvm/config/deployment.env.example1,109 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | No Python API symbols. |
microvm/evidence.py2,389 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | anchor_master L12 ReceiptTransport L29 ReceiptTransport.__init__ L32 ReceiptTransport.submit L39 ReceiptTransport.completion L48 Imports: |
microvm/governance/README.md3,017 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | No Python API symbols. |
microvm/governance/main-ruleset.json1,085 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | No Python API symbols. |
microvm/guest/DEPENDENCIES.md3,885 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | No Python API symbols. |
microvm/guest/build_public.py12,510 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | sha L32 save L37 command L41 source L45 snapshot L54 selected L59 prepare L66 load L118 databases L138 build L163 main L210 Imports: |
microvm/guest/bull-engine152 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | No Python API symbols. |
microvm/guest/derive_database_layout.py1,368 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | No Python API symbols. Imports: |
microvm/guest/engine-adapter.example.sh304 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | No Python API symbols. |
microvm/guest/finalize_build.py2,308 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | main L11 Imports: |
microvm/guest/init4,086 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | No Python API symbols. |
microvm/guest/prepare_build.py4,712 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | sha L13 main L20 Imports: |
microvm/guest/production.fragment487 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | No Python API symbols. |
microvm/guest/public/bull_defconfig1,045 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | No Python API symbols. |
microvm/guest/public/linux.config1,117 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | No Python API symbols. |
microvm/guest/public/patches/linux/linux.hash156 bytes · SHA-256 | Guest bootstrap or explicit engine adapter example | No Python API symbols. |
microvm/integration.py19,847 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | digest L62 save L70 stage_public_runtime L75 vm_identity L93 run L107 VerifiedCancellation L333 Imports: |
microvm/rootfs/build-ext4.sh280 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | No Python API symbols. |
microvm/run-bull-microvm.sh271 bytes · SHA-256 | MicroVM launch, image, audit or deployment documentation | No Python API symbols. |
namespace_certification.py4,298 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. Imports: |
pyproject.toml1,304 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
site/README.md3,076 bytes · SHA-256 | Project documentation | No Python API symbols. |
site/assets/architecture/audit-flow.svg2,147 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/architecture/data-flow.svg2,967 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/architecture/kernel-layers.svg1,613 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/architecture/microvm-io.svg2,731 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/architecture/overview.svg2,341 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/benchmarks/attack-latency.svg4,645 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/benchmarks/attack-memory.svg4,465 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/benchmarks/attack-pass-rate.svg4,317 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/benchmarks/hotpath-throughput.svg1,884 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-approved-sheet.png1,210,848 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-brand-board.svg6,655 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-favicon.svg12,539 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-mark.png86,761 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-mark.svg12,532 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-one-color.svg14,861 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-primary-dark.svg24,465 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-primary.png147,373 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-primary.svg24,448 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/bull-stacked.svg22,590 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/brand/manifest.json1,754 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/explainer/captions.vtt5,638 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/explainer/chapters.json880 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/explainer/manifest.json1,469 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/papers/archive/bull-ii-prior.pdf713,121 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/papers/bull-ii-companion.zip651,898 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/papers/bull-ii-manifest.json4,954 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/papers/bull-ii.pdf320,001 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/papers/bull.pdf230,457 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/assets/papers/manifest.json426 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/data/benchmarks/20260920/attack-summary.csv1,265 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/data/benchmarks/20260920/benchmark.json5,773 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/data/benchmarks/20260920/hotpath.csv248 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/data/hardware/20260923-gestures.json3,052 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/data/validation/603365e.json9,347 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/data/validation/ab53f56.json14,406 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/index.html48,331 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/infrastructure.js2,063 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
site/styles.css22,495 bytes · SHA-256 | Read-only website asset or documentation template | No Python API symbols. |
src/bulldog/__init__.py475 bytes · SHA-256 | Public API and auxiliaries | No Python API symbols. Imports: |
src/bulldog/_namespace_launcher.sh5,366 bytes · SHA-256 | Linux enforcement | No Python API symbols. |
src/bulldog/adversary/__init__.py726 bytes · SHA-256 | Adversary observation components | No Python API symbols. Imports: |
src/bulldog/adversary/contracts.py2,408 bytes · SHA-256 | Adversary observation components | IsolationProfile L12 ProbeResult L20 ModelFingerprint L30 AttackerRecord L39 AttackerRecord.to_dict L53 QuarantineCell L68 QuarantineCell.to_dict L77 Imports: |
src/bulldog/adversary/fingerprint.py3,462 bytes · SHA-256 | Adversary observation components | _compile L48 ModelFingerprinter L55 ModelFingerprinter.__init__ L58 ModelFingerprinter.run_probes L61 ModelFingerprinter.fingerprint L80 Imports: |
src/bulldog/adversary/lure.py2,269 bytes · SHA-256 | Adversary observation components | extract_task L38 LureField L53 LureField.__init__ L56 LureField.deploy L59 Imports: |
src/bulldog/adversary/quarantine.py1,638 bytes · SHA-256 | Adversary observation components | QuarantineManager L26 QuarantineManager.__init__ L29 QuarantineManager.quarantine L33 QuarantineManager.cells L48 Imports: |
src/bulldog/adversary/registry.py3,144 bytes · SHA-256 | Adversary observation components | _normalize L11 task_similarity L15 AdversaryRegistry L23 AdversaryRegistry.__init__ L26 AdversaryRegistry.upsert L31 AdversaryRegistry._find_by_label L52 AdversaryRegistry._assign_swarm L58 AdversaryRegistry.get L71 AdversaryRegistry.all L74 AdversaryRegistry.tabulate L77 Imports: |
src/bulldog/adversary/system.py2,174 bytes · SHA-256 | Adversary observation components | AdversaryCaptureSystem L20 AdversaryCaptureSystem.__init__ L23 AdversaryCaptureSystem.capture L35 AdversaryCaptureSystem.report L56 Imports: |
src/bulldog/advisory.py573 bytes · SHA-256 | Public API and auxiliaries | Advisory L10 AdvisoryModel L16 AdvisoryModel.evaluate L17 NullAdvisoryModel L20 NullAdvisoryModel.evaluate L23 Imports: |
src/bulldog/agent_sentinel.py7,083 bytes · SHA-256 | Public API and auxiliaries | SignalReport L63 _IoSample L70 AgentSentinel L75 AgentSentinel.__init__ L78 AgentSentinel.env_score L96 AgentSentinel.ancestry_score L105 AgentSentinel.record_input_event L130 AgentSentinel.cadence_score L136 AgentSentinel.io_tempo_score L154 AgentSentinel.evaluate L174 Imports: |
src/bulldog/anchor_service.py9,304 bytes · SHA-256 | Audit and state models | AnchorError L20 canonical L24 session_key L28 authenticate L34 verify L39 checkpoint L46 decode L55 AnchorStore L74 AnchorStore.__init__ L77 AnchorStore.connect L93 AnchorStore.accept L102 make_server L143 main L177 Imports: |
src/bulldog/approval.py14,881 bytes · SHA-256 | Dispatch and production | canonical_bytes L28 digest L32 ApprovalProof L37 ApprovalRequired L43 ApprovalRequired.__init__ L44 validate_config L49 binding_for L87 ApprovalGate L112 ApprovalGate.__init__ L113 ApprovalGate._connect L145 ApprovalGate._now L155 ApprovalGate.request L163 ApprovalGate.consume L186 ApprovalGate.hardware_request L246 ApprovalGate.finish L265 ApprovalGate.cancel L272 ApprovalGate.inspect L279 Imports: |
src/bulldog/approval_cli.py5,266 bytes · SHA-256 | Dispatch and production | _host_gate L19 _write_new L31 run L37 add_parser L88 Imports: |
src/bulldog/approval_crypto.py5,469 bytes · SHA-256 | Dispatch and production | ApprovalError L21 _Reader L25 _Reader.__init__ L26 _Reader.take L30 _Reader.uint L37 _Reader.string L40 _Reader.done L43 validate_public_key L48 _inspect_signature L74 verify_hardware_signature L104 Imports: |
src/bulldog/assurance.py12,142 bytes · SHA-256 | Assurance and release evidence | AssuranceError L25 ControlResult L30 ControlResult.to_dict L39 AssuranceReport L52 AssuranceReport.to_dict L62 _registry_bytes L81 load_control_registry L89 registry_digest L126 _gate_status L138 _release_results L144 evaluate_assurance L186 Imports: |
src/bulldog/audit.py21,080 bytes · SHA-256 | Audit and state models | AuditVerification L20 AuditIntegrityError L28 AuditLedger L32 AuditLedger.__init__ L42 AuditLedger._calculate_hash L119 AuditLedger._mac L133 AuditLedger._anchor_mac L144 AuditLedger._remote_mac L151 AuditLedger._read_anchor L158 AuditLedger._write_atomic_json L174 AuditLedger._write_anchor L195 AuditLedger.production_anchor_ready L212 AuditLedger._write_remote_anchor L215 AuditLedger._verify_remote_checkpoint L274 AuditLedger._verify_unlocked L318 AuditLedger.verify L430 AuditLedger._append_payload L447 AuditLedger.reconcile_remote L489 AuditLedger.append L510 AuditLedger.append_event L536 AuditLedger._last_hash L548 Imports: |
src/bulldog/audit_transport.py9,547 bytes · SHA-256 | Audit and state models | NoRedirect L17 NoRedirect.redirect_request L18 AnchorIdentity L23 AnchorIdentity.__post_init__ L27 AnchorIdentity.check_ack L31 HTTPSAnchorTransport L39 HTTPSAnchorTransport.__init__ L42 HTTPSAnchorTransport.submit L54 RelayAnchorTransport L76 RelayAnchorTransport.__init__ L79 RelayAnchorTransport.production_ready L88 RelayAnchorTransport.submit L93 HostAnchorRelay L131 HostAnchorRelay.__init__ L134 HostAnchorRelay.handle L139 bootstrap_guest_relay L154 production_transport_from_environment L185 Imports: |
src/bulldog/broker_hardening.py3,810 bytes · SHA-256 | Broker components | BrokerGrantError L15 ScopedGrant L22 HardenedSecretBroker L39 HardenedSecretBroker.__init__ L51 HardenedSecretBroker.issue_scoped_grant L72 HardenedSecretBroker.revoke_scoped L134 HardenedSecretBroker.get_scoped L149 Imports: |
src/bulldog/canonicalizer.py7,358 bytes · SHA-256 | Permission and identity | TrustedExecutionContext L25 ActionCanonicalizationError L40 _decode_resource L44 _reject_unicode_separator_or_dot_folding L62 canonicalize_filesystem_resource L73 canonicalize_resource L117 derive_capability L127 canonicalize_action L171 Imports: |
src/bulldog/cgroup_scope.py3,149 bytes · SHA-256 | Linux enforcement | CgroupUnavailable L10 CgroupV2Scope L15 CgroupV2Scope.__post_init__ L23 CgroupV2Scope.from_environment L32 CgroupV2Scope.__enter__ L51 CgroupV2Scope._write L69 CgroupV2Scope.attach_current L80 CgroupV2Scope.__exit__ L85 Imports: |
src/bulldog/cli.py8,124 bytes · SHA-256 | Public API and auxiliaries | _run_verify L14 _run_manifest L36 _run_policy L62 _run_assurance_status L96 build_parser L137 main L236 Imports: |
src/bulldog/container_hardening.py4,939 bytes · SHA-256 | Linux enforcement | MountEntry L23 parse_mountinfo L43 assert_no_shared_mounts L63 assert_no_new_privs L77 effective_capabilities L87 assert_no_effective_caps L95 assert_sandbox_invariants L104 audit_launcher_script L113 Imports: |
src/bulldog/data/assurance_controls.json12,558 bytes · SHA-256 | Assurance and release evidence | No Python API symbols. |
src/bulldog/dispatcher.py22,212 bytes · SHA-256 | Dispatch and production | DispatchDenied L28 DispatchRequest L33 CapabilityDispatcher L42 CapabilityDispatcher.__init__ L51 CapabilityDispatcher._verify_actual_production_runtime L117 CapabilityDispatcher._trusted_context_for L163 CapabilityDispatcher.canonicalize L186 CapabilityDispatcher._bind_execution L195 CapabilityDispatcher._evaluate_broker_action L234 CapabilityDispatcher._authorize_legacy_broker_action L244 CapabilityDispatcher._authorize_domain_broker_action L274 CapabilityDispatcher.execute L313 CapabilityDispatcher.issue_domain_secret_grant L364 CapabilityDispatcher._perform_broker_effect L405 CapabilityDispatcher.get_secret L410 CapabilityDispatcher.fetch_egress L488 Imports: |
src/bulldog/egress_proxy.py11,796 bytes · SHA-256 | Broker components | EgressDenied L22 EgressError L26 EgressResponse L31 _PinnedHTTPConnection L37 _PinnedHTTPConnection.__init__ L38 _PinnedHTTPConnection.connect L42 _PinnedHTTPSConnection L46 _PinnedHTTPSConnection.__init__ L47 _PinnedHTTPSConnection.connect L53 EgressBroker L58 EgressBroker.__init__ L61 EgressBroker.start L100 EgressBroker.stop L118 EgressBroker._serve L132 EgressBroker._authorize_peer L146 EgressBroker._handle L161 EgressBroker.fetch L189 EgressBroker._resolve_public_addresses L265 EgressBroker._validate_public_destination L294 EgressBroker._read_line L298 EgressBroker._emit L311 broker_fetch L316 Imports: |
src/bulldog/engine.py2,045 bytes · SHA-256 | Permission and identity | BulldogEngine L18 BulldogEngine.__init__ L19 BulldogEngine.evaluate L31 BulldogEngine.clear_session L73 Imports: |
src/bulldog/filesystem_manifest.py10,129 bytes · SHA-256 | File admission | FilesystemManifestViolation L17 ManifestEntry L22 FilesystemManifest L35 _limit_error L43 _check_path_budget L47 _hash_fd L58 build_manifest L73 Imports: |
src/bulldog/guest_engine.py10,139 bytes · SHA-256 | MicroVM host and guest | open_port L26 load_authority L42 run_session L76 main L166 Imports: |
src/bulldog/guest_preflight.py5,276 bytes · SHA-256 | MicroVM host and guest | _command L28 inspect_guest L36 main L119 Imports: |
src/bulldog/hardware_approval/__init__.py78 bytes · SHA-256 | Hardware approval | No Python API symbols. |
src/bulldog/hardware_approval/cli.py2,254 bytes · SHA-256 | Hardware approval | run L9 add_parser L34 Imports: |
src/bulldog/hardware_approval/diagnostic.py5,197 bytes · SHA-256 | Hardware approval | main L10 Imports: |
src/bulldog/hardware_approval/protocol.py3,337 bytes · SHA-256 | Hardware approval | Decision L19 fixed L24 Request L31 Request.encode L43 Request.digest L54 Request.decode L58 Assertion L69 Assertion.signed_bytes L79 Assertion.encode L87 Assertion.decode L91 Imports: |
src/bulldog/hardware_approval/provider.py3,378 bytes · SHA-256 | Hardware approval | validate_credential L16 counter_identity L45 request_for L50 Imports: |
src/bulldog/hardware_approval/verifier.py1,830 bytes · SHA-256 | Hardware approval | verify L9 Imports: |
src/bulldog/host_certify.py4,258 bytes · SHA-256 | Linux enforcement | certify_host L10 Imports: |
src/bulldog/integrity.py4,600 bytes · SHA-256 | Dispatch and production | IntegrityViolation L10 sha256_file L64 _canonical_manifest_bytes L75 build_integrity_manifest L88 sign_integrity_manifest L104 verify_manifest_signature L128 verify_integrity_manifest L150 Imports: |
src/bulldog/landlock_policy.py5,849 bytes · SHA-256 | Linux enforcement | LandlockUnavailable L10 LandlockError L14 _RulesetAttr L54 _PathBeneathAttr L58 _syscall L72 _handled_access L85 _add_path_rule L94 install_bull_landlock L143 Imports: |
src/bulldog/linux_sandbox.py7,208 bytes · SHA-256 | Linux enforcement | LandlockUnavailable L60 LandlockError L64 _RulesetAttr L68 _PathBeneathAttr L74 _require_supported_architecture L91 _raise_errno L104 landlock_abi L113 supported_fs_rights L149 writable_access L179 _set_no_new_privs L210 _create_ruleset L227 _add_path_rule L252 _restrict_self L292 apply_landlock L310 Imports: |
src/bulldog/malware_scanner.py7,006 bytes · SHA-256 | File admission | MalwareScannerUnavailable L16 MalwareScannerError L20 FileScanResult L25 ProjectScanResult L36 MalwareScanner L43 MalwareScanner.__init__ L48 MalwareScanner.sha256_file L71 MalwareScanner._scanner_limits L81 MalwareScanner.scan_file L94 MalwareScanner.scan_project L171 Imports: |
src/bulldog/microvm.py19,179 bytes · SHA-256 | MicroVM host and guest | MicroVMError L24 config_file L42 overlap L67 restricted_root L71 roots L85 engine_path L100 bounded L116 safe_qemu_path L122 firmware_bytes L129 build_image L154 validate_channels L207 cpu_argument L225 qemu_command L243 supervise L271 main L307 Imports: |
src/bulldog/microvm_image.py916 bytes · SHA-256 | MicroVM host and guest | interrupted L10 main L14 Imports: |
src/bulldog/microvm_protocol.py5,196 bytes · SHA-256 | MicroVM host and guest | RemoteSessionError L12 RemoteSessionError.__init__ L13 SessionChannel L18 SessionChannel.__init__ L19 SessionChannel._transfer L32 SessionChannel.send L58 SessionChannel._send L67 SessionChannel.receive L83 SessionChannel._receive L92 Imports: |
src/bulldog/models.py2,642 bytes · SHA-256 | Permission and identity | Decision L8 Provenance L15 Capability L24 ActionRequest L40 ActionRequest.from_dict L54 Evaluation L75 has_external_provenance L82 Imports: |
src/bulldog/multiagent/__init__.py1,124 bytes · SHA-256 | Multi-agent orchestration | No Python API symbols. Imports: |
src/bulldog/multiagent/agents.py13,905 bytes · SHA-256 | Multi-agent orchestration | normalize_text L94 scan_text L108 BaseAgent L151 BaseAgent.__init__ L154 BaseAgent.agent_id L160 BaseAgent.handle L163 BaseAgent.process L191 CoordinatorAgent L195 CoordinatorAgent.process L205 PolicyRule L244 PolicyRule.__init__ L247 PolicyRule.match L253 PolicyAgent L263 PolicyAgent.__init__ L271 PolicyAgent.decide L281 PolicyAgent.consume L287 PolicyAgent.process L294 ExecutorAgent L321 ExecutorAgent.__init__ L324 ExecutorAgent.register_action L335 ExecutorAgent.process L338 AuditorAgent L375 AuditorAgent.process L378 VerifierAgent L389 VerifierAgent.process L392 Imports: |
src/bulldog/multiagent/bus.py6,261 bytes · SHA-256 | Multi-agent orchestration | DeliveryError L23 MessageBus L27 MessageBus.__init__ L30 MessageBus.set_boundary_guard L38 MessageBus.inspect_handler_exception L46 MessageBus.register L56 MessageBus.identity L73 MessageBus.agent_ids L79 MessageBus.deliver L83 MessageBus.broadcast L116 MessageBus.trace L135 MessageBus._apply_boundary_guard L142 MessageBus._record L168 Imports: |
src/bulldog/multiagent/contracts.py3,608 bytes · SHA-256 | Multi-agent orchestration | Verdict L16 Severity L24 Capability L35 Capability.__str__ L41 AgentIdentity L57 AgentIdentity.new L65 AgentIdentity.has L77 Envelope L82 Envelope.forwarded L94 Finding L109 AgentResult L120 TraceEvent L132 Imports: |
src/bulldog/multiagent/honeytoken.py14,781 bytes · SHA-256 | Multi-agent orchestration | HoneyTokenState L31 HoneyTokenLeak L43 HoneyTokenLeak.__init__ L46 HoneyTokenAgent L51 HoneyTokenAgent.__init__ L65 HoneyTokenAgent.agent_id L86 HoneyTokenAgent.mint L89 HoneyTokenAgent.trusted_context L121 HoneyTokenAgent.fingerprint L133 HoneyTokenAgent.complete L136 HoneyTokenAgent.is_tripped L142 HoneyTokenAgent.finding L147 HoneyTokenAgent.handle L152 HoneyTokenAgent.boundary_guard L182 HoneyTokenAgent.inspect_external_write L207 HoneyTokenAgent._inspect_envelope L221 HoneyTokenAgent._inspect_value L252 HoneyTokenAgent._collect_strings L311 HoneyTokenAgent._representations L350 HoneyTokenAgent._matching_representation L365 HoneyTokenAgent._trip L371 HoneyTokenAgent._state L379 HoneyTokenAgent._prune_locked L386 HoneyTokenAgent._format_path L397 Imports: |
src/bulldog/multiagent/system.py8,970 bytes · SHA-256 | Multi-agent orchestration | _findings_as_dicts L39 StepReport L47 StepReport.to_dict L56 RunReport L67 RunReport.blocked L78 RunReport.to_dict L81 MultiAgentSystem L92 MultiAgentSystem.__init__ L102 MultiAgentSystem.register_action L128 MultiAgentSystem.guard_external_write L132 MultiAgentSystem.run L146 MultiAgentSystem._run_step L202 Imports: |
src/bulldog/namespace_sandbox.py17,985 bytes · SHA-256 | Linux enforcement | SandboxAttestation L23 SandboxResult L40 SandboxUnavailable L49 SandboxAttestationError L53 SandboxOutputLimitExceeded L57 _terminate_process_group L67 _run_bounded L81 _detect_sandbox_python L167 NamespaceSandbox L189 NamespaceSandbox.__init__ L192 NamespaceSandbox._parse_attestation L233 NamespaceSandbox.run L296 Imports: |
src/bulldog/pinned_egress.py4,484 bytes · SHA-256 | Broker components | _PinnedHTTPSConnection L16 _PinnedHTTPSConnection.__init__ L20 _PinnedHTTPSConnection.connect L47 resolve_public_once L70 pinned_https_fetch L121 Imports: |
src/bulldog/policy.py8,336 bytes · SHA-256 | Permission and identity | DeterministicPolicy L73 DeterministicPolicy.evaluate L77 Imports: |
src/bulldog/policy_bundle.py3,798 bytes · SHA-256 | Dispatch and production | PolicyBundleError L13 PolicyBundle L18 _canonical_bytes L25 sign_policy_bundle L34 verify_policy_bundle L72 load_policy_bundle L121 Imports: |
src/bulldog/production_gate.py12,478 bytes · SHA-256 | Dispatch and production | ProductionGateFailure L17 ProductionRequirements L22 ProductionGateCheck L36 ProductionGateCheck.to_dict L42 _pass L51 _blocked L55 _fail L59 _check_remote_anchor L63 _check_policy_bundle L119 _check_snapshot_scratch L149 _check_audit_ledger_path L183 _check_cgroup_parent L216 _check_seccomp_profile L249 _check_integrity_manifest L266 evaluate_production_environment L307 verify_production_environment L373 Imports: |
src/bulldog/profiles.py13,981 bytes · SHA-256 | Dispatch and production | _ExecutionPermit L38 _action_hash L44 _verify_broker_boundary L58 DevelopmentRuntime L86 DevelopmentRuntime.__init__ L89 ProductionRuntime L95 ProductionRuntime.__init__ L100 ProductionRuntime.verify_trusted_state L157 ProductionRuntime.approval_gate L181 ProductionRuntime._mint_dispatch_permit L198 ProductionRuntime._valid_permit L213 ProductionRuntime.execute L229 DevelopmentDispatcher L256 DevelopmentDispatcher.__init__ L257 ProductionDispatcher L266 ProductionDispatcher.__init__ L267 ProductionDispatcher._evaluate_broker_action L281 ProductionDispatcher._perform_broker_effect L285 ProductionDispatcher.execute L312 Imports: |
src/bulldog/release_evidence.py9,118 bytes · SHA-256 | Assurance and release evidence | ReleaseEvidenceError L15 sha256_file L19 write_checksums L24 read_checksums L49 verify_checksums L67 inspect_cyclonedx L96 inspect_sigstore_bundle L118 predicate_type_from_bundle L139 inspect_release_evidence L149 main L186 Imports: |
src/bulldog/resource_limits.py2,290 bytes · SHA-256 | Linux enforcement | ResourceBudget L9 _safe_limit L30 apply_resource_budget L62 current_budget L100 Imports: |
src/bulldog/runtime.py14,957 bytes · SHA-256 | Dispatch and production | ExecutionResult L35 BulldogRuntime L52 BulldogRuntime.__init__ L61 BulldogRuntime._binding_failure L113 BulldogRuntime._deny_binding L144 BulldogRuntime.execute L171 Imports: |
src/bulldog/sandbox_backends.py7,642 bytes · SHA-256 | Linux enforcement | SandboxBackendUnavailable L22 SandboxPolicy L27 SandboxPolicy.__post_init__ L42 BackendAttestation L54 BackendAttestation.as_dict L64 SandboxBackend L68 SandboxBackend.probe L74 SandboxBackend.require_strict L77 SandboxBackend.run L80 _UnavailableNativeBackend L84 _UnavailableNativeBackend.probe L91 _UnavailableNativeBackend.require_strict L103 _UnavailableNativeBackend.run L110 MacOSSeatbeltBackend L115 WindowsAppContainerBackend L133 LinuxNamespaceBackend L152 LinuxNamespaceBackend.probe L158 LinuxNamespaceBackend.require_strict L194 LinuxNamespaceBackend.run L203 select_backend L210 strict_backend_attestation L222 Imports: |
src/bulldog/seccomp_policy.py10,985 bytes · SHA-256 | Linux enforcement | SeccompUnavailable L8 SeccompError L12 _ScmpArgCmp L34 SCMP_ACT_ERRNO L43 _load_libseccomp L270 _check L315 _resolve L324 _add_cmp_rule L331 install_bull_seccomp L355 Imports: |
src/bulldog/secret_broker.py10,196 bytes · SHA-256 | Broker components | SecretBrokerError L21 SecretGrant L26 SecretBroker L34 SecretBroker.__init__ L37 SecretBroker.put_secret L73 SecretBroker.issue_grant L78 SecretBroker.revoke L120 SecretBroker.start L126 SecretBroker.stop L145 SecretBroker._serve L159 SecretBroker._authorize_peer L173 SecretBroker._handle L188 SecretBroker._authorize_and_get L221 SecretBroker._read_line L261 SecretBroker._emit L274 request_secret L279 Imports: |
src/bulldog/secure_fs.py4,029 bytes · SHA-256 | File admission | SecurePathViolation L11 _OpenHow L22 _components L33 trusted_root_fd L50 _openat2 L60 open_beneath L98 stat_beneath L151 Imports: |
src/bulldog/security_domain.py18,346 bytes · SHA-256 | Permission and identity | SecurityDomainError L15 GoalTransition L20 SecurityDomain L29 hash_intent L51 hash_command L58 hash_model_id L69 _domain_fingerprint L78 SecurityDomainRegistry L110 SecurityDomainRegistry.__init__ L127 SecurityDomainRegistry._normalize_hosts L146 SecurityDomainRegistry._new_id L160 SecurityDomainRegistry._validate_identity_binding L163 SecurityDomainRegistry.create_root L180 SecurityDomainRegistry.spawn_child L238 SecurityDomainRegistry.get L316 SecurityDomainRegistry.require_active L322 SecurityDomainRegistry.assert_capabilities L335 SecurityDomainRegistry.parent_capabilities L347 SecurityDomainRegistry.trusted_context L356 SecurityDomainRegistry.transition_goal L375 SecurityDomainRegistry.assert_egress L413 SecurityDomainRegistry.freeze L421 SecurityDomainRegistry.freeze_root L435 SecurityDomainRegistry.record_dispatch L451 SecurityDomainRegistry.record_broker_event L473 SecurityDomainRegistry._domain_event L496 SecurityDomainRegistry._emit L515 Imports: |
src/bulldog/session_guard.py4,585 bytes · SHA-256 | Permission and identity | SessionEvent L33 SessionGuard L39 SessionGuard.session_key L43 SessionGuard.enforce L71 SessionGuard._remember L158 SessionGuard.clear L169 Imports: |
src/bulldog/snapshot.py14,417 bytes · SHA-256 | File admission | SnapshotViolation L32 ProjectSnapshot L37 _force_remove_tree L45 _content_hash L73 _identity_index L91 hash_tree L105 _copy_file L117 create_snapshot L195 _worker_environment L317 create_snapshot_isolated L337 destroy_snapshot L428 Imports: |
src/bulldog/snapshot_worker.py917 bytes · SHA-256 | File admission | main L11 Imports: |
src/bulldog/socket_hardening.py3,940 bytes · SHA-256 | Broker components | HardeningError L24 bind_private_unix_socket L28 peer_credentials L83 require_peer_uid L91 accept_authenticated L107 Imports: |
src/bulldog/trace_model.py11,847 bytes · SHA-256 | Audit and state models | TraceViolation L7 BullTraceState L53 TraceEvent L79 _fail L84 validate_invariants L88 apply_transition L212 verify_trace L519 Imports: |
src/bulldog/trace_runtime.py1,336 bytes · SHA-256 | Audit and state models | RuntimeTraceVerifier L14 RuntimeTraceVerifier.emit L30 RuntimeTraceVerifier.snapshot L56 RuntimeTraceVerifier.reset L62 Imports: |
src/bulldog/verify.py5,040 bytes · SHA-256 | Public API and auxiliaries | run_pytest L14 verify_audit L29 verify_production L50 main L67 Imports: |
src/bulldog/workspace_limits.py3,813 bytes · SHA-256 | File admission | WorkspaceLimitViolation L9 WorkspaceBudget L14 WorkspaceBudget.from_environment L28 WorkspaceBudget.validate L70 deadline_after L93 require_before L97 production_snapshot_root L102 Imports: |
tests/redteam_local_host/test_brokers_and_environment.py6,246 bytes · SHA-256 | Regression fixture or test; not deployment certification | _PeerSocket L19 _PeerSocket.__init__ L20 _PeerSocket.getsockopt L23 test_secret_broker_rejects_wrong_unix_peer_uid L27 test_egress_broker_rejects_wrong_unix_peer_uid L38 test_one_shot_secret_grant_is_race_safe L50 test_nonpublic_and_metadata_class_addresses_fail_closed L90 test_mixed_public_private_dns_answers_fail_closed L107 test_get_authorization_cannot_be_repurposed_as_post L119 test_sandbox_bootstrap_scrubs_environment_and_omits_host_surfaces L150 test_redirects_are_not_followed_without_reauthorization L171 Imports: |
tests/redteam_local_host/test_production_entrypoints.py3,438 bytes · SHA-256 | Regression fixture or test; not deployment certification | _exec_action L14 test_legacy_production_boolean_is_rejected L27 test_development_runtime_is_loudly_marked_unsafe L32 test_production_runtime_rejects_caller_supplied_security_components L41 test_direct_production_runtime_call_has_no_execution_authority L46 test_dispatch_permit_is_bound_to_action_and_exact_argv L65 test_signed_deployment_policy_is_a_global_capability_ceiling L89 Imports: |
tests/redteam_local_host/test_snapshot_worker.py1,273 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_isolated_snapshot_worker_returns_read_only_bounded_snapshot L5 Imports: |
tests/redteam_local_host/test_workspace_admission.py4,639 bytes · SHA-256 | Regression fixture or test; not deployment certification | _budget L13 test_file_count_budget_fails_closed L29 test_total_byte_budget_fails_closed L38 test_sparse_or_oversized_file_is_rejected_before_copy L47 test_directory_depth_budget_fails_closed L57 test_symlink_hardlink_and_fifo_are_rejected L66 test_kernel_constrained_open_refuses_symlink_component L93 test_snapshot_is_read_only_and_cleanup_restores_then_removes L105 test_interrupted_snapshot_cleanup_leaves_no_partial_tree L126 Imports: |
tests/redteam_multiagent/test_honeytoken_canary.py9,962 bytes · SHA-256 | Regression fixture or test; not deployment certification | _ExplodingAgent L19 _ExplodingAgent.__init__ L20 _ExplodingAgent.process L24 HoneyTokenBoundaryTests L28 HoneyTokenBoundaryTests._guarded_bus L29 HoneyTokenBoundaryTests.test_benign_run_keeps_raw_canary_out_of_report_and_trace L39 HoneyTokenBoundaryTests.test_raw_canary_is_allowed_only_in_initial_trusted_context L50 HoneyTokenBoundaryTests.test_initial_canary_exposure_is_message_bound_and_one_shot L75 HoneyTokenBoundaryTests.test_base64_encoded_canary_is_blocked L107 HoneyTokenBoundaryTests.test_canary_split_across_structured_fields_is_blocked L126 HoneyTokenBoundaryTests.test_cross_run_canary_leak_trips_current_and_source_trace L145 HoneyTokenBoundaryTests.test_post_run_memory_write_is_guarded L165 HoneyTokenBoundaryTests.test_canary_in_agent_exception_trips_before_logging L179 HoneyTokenBoundaryTests.test_ordinary_agent_exception_redacts_message_from_log_and_result L205 HoneyTokenBoundaryTests.test_uninspectably_large_boundary_fails_closed L232 HoneyTokenBoundaryTests.test_boundary_trace_records_no_raw_canary_on_drop L251 Imports: |
tests/redteam_multiagent/test_redteam_bypass.py5,348 bytes · SHA-256 | Regression fixture or test; not deployment certification | RedTeamBypassTests L15 RedTeamBypassTests.setUp L16 RedTeamBypassTests._blocked L24 RedTeamBypassTests.test_plain_injection_is_blocked L32 RedTeamBypassTests.test_uppercase_injection_is_blocked L38 RedTeamBypassTests.test_cyrillic_homoglyph_is_blocked L44 RedTeamBypassTests.test_zero_width_split_is_blocked L50 RedTeamBypassTests.test_spacing_in_destructive_command_is_blocked L56 RedTeamBypassTests.test_wget_pipe_to_shell_is_blocked L61 RedTeamBypassTests.test_base64_encoded_injection_is_blocked L66 RedTeamBypassTests.test_injection_via_description_key_is_blocked L73 RedTeamBypassTests.test_nested_steps_injection_is_blocked L80 RedTeamBypassTests.test_action_name_tricks_are_denied L88 RedTeamBypassTests.test_plan_bomb_is_blocked L93 RedTeamBypassTests.test_text_bomb_is_blocked L99 RedTeamBypassTests.test_forged_policy_verdict_cannot_reach_executor L102 RedTeamBypassTests.test_approval_token_cannot_be_replayed L117 RedTeamBypassTests.test_benign_task_still_allowed L146 Imports: |
tests/test_adversary_capture.py5,721 bytes · SHA-256 | Regression fixture or test; not deployment certification | claude_agent L15 gpt_agent L28 llama_agent L39 FingerprintTests L48 FingerprintTests.test_claude_attributed L49 FingerprintTests.test_gpt_attributed L57 FingerprintTests.test_unknown_when_no_signature L62 LureTests L69 LureTests.test_objective_echo_extracts_task L70 LureTests.test_no_task_returns_none L76 LureTests.test_lure_field_deploys_until_disclosure L80 RegistryTests L87 RegistryTests.test_same_task_clusters_into_one_swarm L88 RegistryTests.test_different_tasks_separate_swarms L95 RegistryTests.test_tabulation_counts L101 QuarantineTests L111 QuarantineTests.test_severe_findings_get_strict_locked_cell L112 QuarantineTests.test_no_findings_not_quarantined_by_capture L120 CaptureSystemTests L126 CaptureSystemTests.test_full_swarm_capture L127 Imports: |
tests/test_advisory_monotonicity.py2,747 bytes · SHA-256 | Regression fixture or test; not deployment certification | FixedAdvisory L11 FixedAdvisory.__init__ L12 FixedAdvisory.evaluate L16 _action L24 test_advisory_allow_cannot_lower_sandbox_policy L47 test_advisory_allow_cannot_lower_escalate_policy L60 test_advisory_allow_cannot_override_hard_deny L74 test_advisory_can_tighten_allow_to_deny_but_not_grant_authority L89 Imports: |
tests/test_anchor_service.py8,124 bytes · SHA-256 | Regression fixture or test; not deployment certification | record L16 setup_store L21 test_durable_restart_exact_retry_and_conflict L29 test_authentication_sequence_hash_and_bounds L46 test_budget_exhaustion_fails_closed L63 test_lost_ack_keeps_evidence_and_retry_does_not_duplicate L69 test_ack_cannot_cross_session_sequence_or_direction L91 test_ledger_blocks_after_missing_ack_and_explicit_recovery L104 test_legacy_url_ledger_cannot_satisfy_production L130 test_local_ledger_budget_preserves_previous_head L135 test_oversize_transport_record_rejected_before_local_append L145 test_real_local_tls_acceptance_and_unavailable_service L156 Imports: |
tests/test_approved_brand.py3,416 bytes · SHA-256 | Regression fixture or test; not deployment certification | ApprovedBrandTests L16 ApprovedBrandTests.test_original_approved_image_is_preserved_byte_for_byte L17 ApprovedBrandTests.test_every_asset_matches_the_manifest L23 ApprovedBrandTests.test_vectors_derive_from_approved_source_and_are_self_contained L35 ApprovedBrandTests.test_existing_project_and_publication_logo_wiring_is_preserved L47 ApprovedBrandTests.test_one_color_variant_uses_only_ink_and_knockout L59 Imports: |
tests/test_assurance.py4,887 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_registry_is_unique_and_profile_references_are_valid L22 test_missing_deployment_evidence_never_becomes_pass L41 test_dynamic_attestation_maps_to_required_sandbox_controls L58 test_production_gate_emits_structured_seccomp_evidence L120 test_cli_parser_exposes_assurance_status L145 Imports: |
tests/test_audit_fail_closed.py3,365 bytes · SHA-256 | Regression fixture or test; not deployment certification | action L11 build L24 AuditFailClosedTests L34 AuditFailClosedTests.test_valid_head_checkpoint L35 AuditFailClosedTests.test_final_record_deletion_detected L44 AuditFailClosedTests.test_refuses_append_after_mutation L55 AuditFailClosedTests.test_refuses_append_after_truncation L68 AuditFailClosedTests.test_clean_append_updates_head L78 Imports: |
tests/test_audit_integrity.py3,709 bytes · SHA-256 | Regression fixture or test; not deployment certification | action L11 build L24 AuditIntegrityTests L34 AuditIntegrityTests.test_valid_chain_verifies L35 AuditIntegrityTests.test_modified_record_detected L44 AuditIntegrityTests.test_deleted_middle_record_detected L57 AuditIntegrityTests.test_reordered_records_detected L67 AuditIntegrityTests.test_forged_previous_hash_detected L77 AuditIntegrityTests.test_forged_record_hash_detected L90 Imports: |
tests/test_benchmark_site.py792 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_benchmark_publication_contract L6 Imports: |
tests/test_brand_site.py7,523 bytes · SHA-256 | Regression fixture or test; not deployment certification | Page L19 Page.__init__ L20 Page.handle_starttag L24 BrandSiteTests L28 BrandSiteTests.setUpClass L30 BrandSiteTests.tearDownClass L34 BrandSiteTests.setUp L36 BrandSiteTests.test_homepage_tracks_current_kvm_and_authority_status L39 BrandSiteTests.test_public_testing_interface_is_removed L48 BrandSiteTests.test_publication_removes_video_and_transcript L56 BrandSiteTests.test_built_links_assets_and_unique_ids L62 BrandSiteTests.test_every_tracked_source_file_is_indexed L81 BrandSiteTests.test_vectors_are_self_contained_and_diagrams_accessible L91 BrandSiteTests.test_published_deployment_evidence_matches_visible_claims L101 BrandSiteTests.test_readme_and_publication_keep_security_limits L115 BrandSiteTests.test_builder_refuses_source_output L132 Imports: |
tests/test_canonicalizer_paths_v2.py2,776 bytes · SHA-256 | Regression fixture or test; not deployment certification | _canonicalize L19 test_traversal_never_classifies_as_project L44 test_project_path_is_canonicalized_before_classification L49 test_sensitive_path_wins_over_process_operation L55 test_untrusted_domain_metadata_cannot_override_host_context L63 Imports: |
tests/test_cgroup_check.py3,981 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_enforcement_failures_survive_optimization L89 Imports: |
tests/test_cloudflare_audit_anchor_contract.py2,532 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_cloudflare_anchor_files_and_route_contract L6 test_build_config_uses_explicit_existing_database_without_changing_template L23 test_build_config_refuses_missing_or_placeholder_database L46 Imports: |
tests/test_deployment_checks.py7,111 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_missing_kvm_is_blocked L22 test_kvm_probe_checks_api_and_closes_descriptors L32 test_asset_manifest_rejects_changed_bytes L48 test_private_key_exact_bytes_and_permissions L62 test_test_runner_rejects_skipped_evidence L77 test_command_timeout_stops_owned_child L88 test_real_tls_relay_correlates_receipt_with_separate_host_key L98 test_receipt_rejects_invalid_upstream_ack_before_persistence L141 Imports: |
tests/test_deployment_setup.py11,473 bytes · SHA-256 | Regression fixture or test; not deployment certification | install L18 test_two_installations_have_independent_authority_and_no_ambient_fallback L24 test_installations_cannot_authenticate_to_each_others_collectors L38 test_cross_installation_signed_documents_are_rejected L54 test_rerun_never_rotates_keys_or_replaces_ledger L61 test_setup_remains_private_with_permissive_umask L71 test_imported_secret_requires_private_regular_file L83 test_existing_collector_bytes_and_session_survive_configuration_changes L100 test_private_state_cannot_be_inside_admitted_project L116 test_configure_cannot_resign_changed_runtime L122 test_environment_file_handles_quoted_paths_and_does_not_print_secrets L133 test_software_approval_key_is_not_enrolled L147 test_ordinary_directory_cannot_claim_cgroup_readiness L156 test_host_provisioner_never_targets_root_service_uid L163 test_consequential_capability_requires_enrolled_credential L176 test_source_fixture_processes_do_not_inherit_deployment_authority L182 test_invalid_deployment_stops_before_running_checks L191 test_partial_cgroup_configuration_removes_empty_scope L205 test_guest_public_source_permissions_ignore_private_umask L218 test_resource_checks_refuse_root_before_starting_workloads L242 Imports: |
tests/test_egress_lifecycle.py1,067 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_two_authorized_requests_have_separate_trace_lifecycles L5 Imports: |
tests/test_egress_trace.py1,012 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_egress_broker_emits_single_grant L7 test_empty_egress_broker_has_no_grant L24 test_duplicate_broker_grant_remains_illegal L35 Imports: |
tests/test_full_argv_and_production_wiring.py6,704 bytes · SHA-256 | Regression fixture or test; not deployment certification | CleanScanner L15 CleanScanner.scan_project L16 RecordingSandbox L20 RecordingSandbox.__init__ L21 RecordingSandbox.run L24 _action L38 test_runtime_full_argv_binding_denies_argument_drift_before_execution L51 test_runtime_full_argv_binding_allows_exact_authorized_vector L76 test_legacy_production_boolean_is_never_a_production_boundary L99 test_production_dispatcher_rejects_nonproduction_runtime_marker L126 test_empty_grant_returns_denial_without_sandbox_effect L133 test_production_binding_rejects_unauthorized_vector_before_runtime L171 Imports: |
tests/test_fuzz_boundaries.py2,183 bytes · SHA-256 | Regression fixture or test; not deployment certification | _random_text L23 test_random_model_metadata_cannot_override_trusted_identity L39 test_random_illegal_trace_transitions_fail_closed L96 Imports: |
tests/test_governed_agent.py5,828 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_untrusted_proposal_cannot_add_authority L17 test_complete_read_only_tool_surface L22 event L28 test_pending_read_recovers_without_advancing L32 test_identity_changes_refused L40 test_ambiguous_history_refused L51 test_security_history_survives_restart L56 test_corrupt_audit_cannot_resume L66 test_cloud_model_refused L75 test_redirect_refused L81 test_uid_limit_remains_without_cgroup L86 test_offline_verifier_rejects_unpinned_rewrite_and_false_completion L98 test_checkpoint_delivery_failure_blocks_then_explicit_reconcile L110 Imports: |
tests/test_guest_engine.py2,851 bytes · SHA-256 | Regression fixture or test; not deployment certification | authority L14 test_authority_rejects_tampering_and_expiry L28 test_expired_authority_is_not_admitted L38 test_authority_rejects_writable_permissions L45 test_relay_environment_alone_cannot_satisfy_gate L53 test_private_paired_channels L60 Imports: |
tests/test_guest_preflight.py1,629 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_missing_dependencies_prevent_backend_launch L5 test_filenames_do_not_satisfy_functionality L18 Imports: |
tests/test_hardening_additions.py5,390 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_bind_private_unix_socket_mode_and_dir L29 test_bind_refuses_preplanted_symlink L39 test_peer_credentials_matches_euid L49 test_accept_authenticated_rejects_foreign_uid L60 test_mountinfo_flags_shared_root L84 test_effective_capabilities_parsing L92 test_launcher_audit_flags_missing_and_unquoted L97 test_sentinel_env_marker_raises_verdict L112 test_sentinel_verdict_monotonic_in_signals L120 test_sentinel_burst_cadence_flags_machine_input L126 test_sentinel_on_verdict_fires_on_agent L139 test_unshare_invocation_includes_ipc_namespace L150 test_bounded_sandbox_output_kills_flooding_workload L159 Imports: |
tests/test_hardware_authority.py3,104 bytes · SHA-256 | Regression fixture or test; not deployment certification | ceremony L13 test_valid L27 test_binding L34 test_rejections L42 test_bad_signature L48 test_skipped_counter L54 test_changed_action L60 test_malformed L67 Imports: |
tests/test_hardware_diagnostic.py4,393 bytes · SHA-256 | Regression fixture or test; not deployment certification | packet L11 Function L21 Function.__init__ L23 Function.__call__ L26 HID L30 HID.__init__ L31 HID.write L46 HID.read L61 HID.close L68 test_stale_decisions_are_discarded_before_fresh_challenge L73 test_active_challenge_mismatch_still_cancels L91 test_bad_queued_report_never_arms L101 test_receive_queue_is_bounded L114 Imports: |
tests/test_hardware_gate.py8,302 bytes · SHA-256 | Regression fixture or test; not deployment certification | custom L18 test_exact_protected_effect_uses_existing_dispatcher L41 test_signed_denial_is_terminal_audited_and_never_executes L54 test_signed_binding_mismatch_rejected L65 test_counter_survives_restart_denial_and_allows_skips L71 test_parallel_consumption_has_one_winner L81 test_failure_never_releases_authority L91 test_audit_outage_consumes_request_and_counter_before_effect L107 test_policy_drift_after_consume_blocks_effect L119 test_disabled_enrollment_cannot_export_and_missing_evidence_rejected L133 Imports: |
tests/test_human_approval.py18,933 bytes · SHA-256 | Regression fixture or test; not deployment certification | string L37 SyntheticSK L41 SyntheticSK.__init__ L42 SyntheticSK.sign L55 setup L71 proof_for L88 test_real_openssh_accepts_valid_synthetic_sk_signature L93 test_presence_and_user_verification_are_both_required L102 test_text_and_cross_namespace_proofs_rejected L108 test_software_key_type_rejected L115 test_pending_has_no_authority_and_exact_approval_consumed_once L122 test_changed_binding_rejected_without_consuming_original L145 test_expiry_cancellation_and_revocation L153 test_wrong_key_cannot_sign_for_enrolled_identity L171 test_parallel_consumption_and_restart_allow_at_most_one L179 test_audit_failure_leaves_consumed_request_nonreplayable L197 test_missing_audit_prevents_pending_request L211 test_clock_rollback_stops_approval L222 test_private_state_permissions_required L230 dispatcher_fixture L237 test_dispatcher_protected_effect_waits_then_executes_once L262 test_invalid_approval_never_reaches_protected_callback L279 test_dispatcher_hard_deny_precedes_approval L300 test_exact_routine_url_continues_without_approval L311 test_effect_error_cannot_be_retried_with_same_approval L320 test_policy_signature_covers_approval_config L339 test_secret_callback_waits_for_matching_credential L349 test_policy_change_after_consumption_blocks_effect L366 test_ordinary_keystroke_cannot_be_a_proof L386 test_production_missing_approval_config_blocks L391 Imports: |
tests/test_microvm.py10,432 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_shipped_defaults_parse L15 test_amd_native_profile_requires_supported_vendor_and_feature L27 test_pinned_firmware_rejects_changes_and_symlinks L37 test_config_rejects_nonliteral_unknown_duplicate L61 test_config_rejects_writable_permissions L70 test_firmware_rejects_writable_permissions L81 test_broad_roots_rejected L93 test_alias_overlap_and_approvals L98 test_engine_parent_symlink_rejected L114 test_numeric_bounds L128 fixture_values L133 test_diagnostic_is_side_effect_free_and_precedence L159 test_images_are_default_and_no_network L175 test_image_rejects_existing_and_parent_symlink L186 test_interrupted_build_leaves_no_output_or_scratch L201 test_supervisor_reaps_exact_child_on_timeout L216 test_real_image_contains_mountpoints_and_does_not_overwrite L226 Imports: |
tests/test_microvm_protocol.py3,733 bytes · SHA-256 | Regression fixture or test; not deployment certification | channels L9 test_roundtrip_workload_text_is_only_payload L19 test_authenticated_wrong_session_sequence_or_operation_rejected L29 test_invalid_completion_length_fails_before_payload L41 test_replay_rejected L48 test_authenticated_guest_error_cannot_be_a_completion L59 test_fresh_sequence_cannot_reuse_execution_authority L66 test_timeout_prevents_late_result_reuse L80 test_invalid_frame_prevents_following_valid_frame L89 Imports: |
tests/test_multiagent.py2,031 bytes · SHA-256 | Regression fixture or test; not deployment certification | MultiAgentSystemTests L8 MultiAgentSystemTests.setUp L9 MultiAgentSystemTests.test_benign_task_is_allowed L17 MultiAgentSystemTests.test_unknown_action_is_denied_by_policy L23 MultiAgentSystemTests.test_injection_marker_blocks_run_before_execution L29 MultiAgentSystemTests.test_bus_traces_every_delivery L40 MultiAgentSystemTests.test_to_dict_round_trip L46 Imports: |
tests/test_policy.py3,784 bytes · SHA-256 | Regression fixture or test; not deployment certification | BulldogPolicyTests L10 BulldogPolicyTests.test_safe_project_write_allowed L11 BulldogPolicyTests.test_ungranted_capability_denied L24 BulldogPolicyTests.test_external_credential_access_denied_even_if_granted L38 BulldogPolicyTests.test_child_cannot_escalate_beyond_parent L51 BulldogPolicyTests.test_canary_access_denied L65 BulldogPolicyTests.test_audit_chain_written L78 Imports: |
tests/test_policy_hardening.py4,753 bytes · SHA-256 | Regression fixture or test; not deployment certification | BulldogHardeningTests L7 BulldogHardeningTests.evaluate L8 BulldogHardeningTests.test_normal_project_read_still_allowed L30 BulldogHardeningTests.test_normal_project_write_still_allowed L38 BulldogHardeningTests.test_project_capability_cannot_read_absolute_external_path L46 BulldogHardeningTests.test_literal_path_traversal_denied L55 BulldogHardeningTests.test_encoded_path_traversal_denied L63 BulldogHardeningTests.test_external_prompt_to_process_not_allowed L71 BulldogHardeningTests.test_external_prompt_to_shell_not_allowed L80 BulldogHardeningTests.test_external_credentials_remain_hard_denied L89 BulldogHardeningTests.test_external_agent_spawn_not_allowed L99 BulldogHardeningTests.test_human_agent_spawn_is_not_zero_risk_allow L108 BulldogHardeningTests.test_bashrc_write_escalated L117 BulldogHardeningTests.test_secret_like_url_escalated L126 Imports: |
tests/test_policy_hardening_v2.py3,425 bytes · SHA-256 | Regression fixture or test; not deployment certification | request L7 HardenedPolicyTests L27 HardenedPolicyTests.test_normal_project_read_allowed L28 HardenedPolicyTests.test_parent_traversal_denied L37 HardenedPolicyTests.test_encoded_traversal_denied L47 HardenedPolicyTests.test_external_process_execution_escalates L57 HardenedPolicyTests.test_external_agent_spawn_escalates L68 HardenedPolicyTests.test_external_credentials_still_hard_denied L78 HardenedPolicyTests.test_persistence_write_escalates L89 HardenedPolicyTests.test_secret_bearing_outbound_url_escalates L99 Imports: |
tests/test_production_boundary.py9,867 bytes · SHA-256 | Regression fixture or test; not deployment certification | _attestation L32 test_security_bootstrap_never_imports_from_agent_workspace L55 test_backend_attestation_is_nonce_bound_and_strict L66 test_strict_seccomp_is_default_deny_surface_not_blacklist L106 test_signed_integrity_manifest_rejects_manifest_replacement L124 _action L153 _evaluation L165 _FakeHTTPResponse L169 _FakeHTTPResponse.__enter__ L172 _FakeHTTPResponse.__exit__ L175 _FakeHTTPResponse.getcode L178 _FakeHTTPResponse.read L181 test_remote_audit_anchor_is_monotonic_and_fail_closed L185 _configure_production_env L214 test_production_gate_requires_all_security_prerequisites L265 test_production_gate_rejects_missing_policy_scratch_audit_or_cgroup L279 Imports: |
tests/test_public_guest_recipe.py4,873 bytes · SHA-256 | Regression fixture or test; not deployment certification | sealed_configuration L10 test_guest_build_refuses_unverified_databases_before_running_make L23 test_changed_build_inputs_are_rejected L41 test_missing_config_requirement_is_a_failure L48 test_source_identity_cannot_be_removed_or_changed L56 test_prepare_requires_new_external_output_and_public_sources L66 test_build_job_limit_reaches_package_builders_and_firmware L74 test_invalid_build_job_limit_stops_before_reading_inputs L110 Imports: |
tests/test_recovery_failures.py6,413 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_storage_failure_refuses_success_and_preserves_evidence L22 test_storage_budget_refuses_append_without_partial_record L54 test_worker_exit_releases_lock_and_retains_pending_plan L64 test_tls_collector_outage_restart_and_explicit_reconciliation L88 Imports: |
tests/test_redteam_authorization_binding.py11,446 bytes · SHA-256 | Regression fixture or test; not deployment certification | CleanScanner L24 CleanScanner.scan_project L25 RecordingSandbox L29 RecordingSandbox.__init__ L30 RecordingSandbox.run L33 FixedDecisionEngine L47 FixedDecisionEngine.__init__ L48 FixedDecisionEngine.evaluate L52 trusted_context L62 benign_read_request L70 test_redteam_benign_read_authority_cannot_drive_unbound_command L82 test_redteam_authorized_executable_must_match_actual_command L104 test_production_full_argv_binding_rejects_semantic_argument_drift L142 test_redteam_egress_dispatch_requires_authorized_request L219 test_redteam_sandbox_egress_verdict_never_reaches_host_broker L261 test_redteam_secret_dispatch_requires_authorized_request L296 test_redteam_sandbox_secret_verdict_never_reaches_host_broker L347 test_redteam_external_content_cannot_authorize_credential_broker L380 Imports: |
tests/test_redteam_sandbox_decision_bypass.py2,972 bytes · SHA-256 | Regression fixture or test; not deployment certification | MidRiskSandboxEngine L17 MidRiskSandboxEngine.evaluate L18 trusted_context L26 egress_request L34 secret_request L46 test_redteam_sandbox_verdict_cannot_pass_egress_broker L58 test_redteam_sandbox_verdict_cannot_reach_secret_broker L83 Imports: |
tests/test_release_evidence.py3,344 bytes · SHA-256 | Regression fixture or test; not deployment certification | _bundle L17 _release_fixture L38 test_release_evidence_inventory_and_attestation_structure L79 test_release_checksum_tamper_is_detected L92 test_release_inventory_requires_every_file L99 Imports: |
tests/test_release_workflow_assurance.py1,684 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_guest_release_requires_sbom_provenance_and_verification L7 test_guest_release_final_inventory_is_verified_before_release L28 Imports: |
tests/test_repository_artifacts.py4,377 bytes · SHA-256 | Regression fixture or test; not deployment certification | git L14 RepositoryArtifactPolicy L21 RepositoryArtifactPolicy.test_no_tracked_local_assets L22 RepositoryArtifactPolicy.test_images_and_private_deployment_files_are_ignored L44 RepositoryArtifactPolicy.test_source_and_templates_remain_trackable L70 RepositoryArtifactPolicy.test_templates_do_not_embed_machine_specific_deployment_root L90 Imports: |
tests/test_runtime_enforcement_v2.py8,438 bytes · SHA-256 | Regression fixture or test; not deployment certification | AllowEngine L21 AllowEngine.evaluate L22 MutatingCleanScanner L30 MutatingCleanScanner.__init__ L31 MutatingCleanScanner.scan_project L35 CapturingSandbox L41 CapturingSandbox.__init__ L42 CapturingSandbox.run L47 _exec_action L66 _read_action L78 test_runtime_rejects_command_launch_without_process_exec L90 test_runtime_rejects_executable_resource_mismatch L112 test_runtime_scans_and_executes_same_immutable_snapshot L133 test_runtime_passes_resource_budget_to_sandbox L158 test_runtime_rejects_special_files_before_execution L179 test_secret_grant_is_sandbox_bound_and_one_shot L201 test_egress_fetch_uses_validated_pinned_ip L220 test_mixed_public_private_dns_answers_fail_closed L260 Imports: |
tests/test_sandbox_backends.py1,681 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_policy_rejects_invalid_network_mode L15 test_policy_rejects_direct_secret_grant L20 test_policy_rejects_nonpositive_output_limit L25 test_linux_selects_linux_backend L30 test_macos_is_explicitly_fail_closed_until_native_backend_exists L34 test_windows_is_explicitly_fail_closed_until_native_backend_exists L42 test_unknown_host_is_fail_closed L50 Imports: |
tests/test_security_domains.py13,433 bytes · SHA-256 | Regression fixture or test; not deployment certification | _FakeRuntime L28 _FakeRuntime.__init__ L29 _FakeRuntime.execute L33 _FakeEgress L48 _FakeEgress.__init__ L49 _FakeEgress.fetch L52 _AllowEngine L57 _AllowEngine.evaluate L58 _CleanScanner L66 _CleanScanner.scan_project L67 _CapturingSandbox L71 _CapturingSandbox.__init__ L72 _CapturingSandbox.run L75 _legacy_trusted L89 test_child_authority_and_egress_are_strict_subsets L97 test_sibling_agents_share_root_behavior_context_but_not_domain_identity L141 test_goal_transitions_require_explicit_trusted_approval L173 test_freezing_root_stops_all_sibling_agents L202 test_dispatcher_uses_registry_identity_not_request_identity L227 test_dispatcher_rejects_authority_outside_domain_ceiling L271 test_domain_egress_is_intersection_of_domain_and_broker_policy L298 test_domain_secret_grant_cannot_cross_domain_or_replay L328 test_hard_block_freezes_entire_cooperating_domain_tree L376 test_runtime_propagates_security_domain_binding_into_sandbox L430 Imports: |
tests/test_session_guard.py8,718 bytes · SHA-256 | Regression fixture or test; not deployment certification | action L12 SessionEnforcementTests L32 SessionEnforcementTests.test_normal_project_sequence_stays_allowed L34 SessionEnforcementTests.test_goal_drift_to_credentials_escalates L56 SessionEnforcementTests.test_alternate_path_after_restriction_escalates L83 SessionEnforcementTests.test_tool_shopping_escalates L120 SessionEnforcementTests.test_session_id_switch_preserves_security_history L164 SessionEnforcementTests.test_different_actors_are_isolated L208 SessionEnforcementTests.test_trusted_security_contexts_are_isolated L263 SessionEnforcementTests.test_hard_deny_cannot_be_weakened L320 Imports: |
tests/test_site_module_map.py3,944 bytes · SHA-256 | Regression fixture or test; not deployment certification | rows_for L20 Links L25 Links.__init__ L26 Links.handle_starttag L31 SiteModuleMapTests L36 SiteModuleMapTests.test_duplicate_basenames_keep_distinct_source_links L37 SiteModuleMapTests.test_descriptions_use_package_relative_identity L46 SiteModuleMapTests.test_unknown_nested_module_still_fails_closed L52 SiteModuleMapTests.test_missing_nested_module_is_not_masked_by_same_basename L58 SiteModuleMapTests.test_duplicate_documented_path_is_rejected L65 SiteModuleMapTests.test_non_runtime_paths_do_not_pollute_module_groups L71 SiteModuleMapTests.test_real_registry_links_match_every_tracked_runtime_path L76 Imports: |
tests/test_snapshot_content.py765 bytes · SHA-256 | Regression fixture or test; not deployment certification | test_directory_storage_size_is_not_content_but_file_size_is L7 Imports: |
tools/adversarial_check.py23,176 bytes · SHA-256 | Documentation build tooling | record L44 expect_reject L49 AnchorError L64 canonical L68 session_key L72 authenticate L78 verify L83 load_reference_module L90 load_real_module L101 attack_anchor L111 attack_canonicalizer L156 attack_dispatcher L188 attack_multiagent L286 run_repo_pytest L456 find_checkout L469 have_network L476 clone L484 main L496 Imports: |
tools/audit_governed_agent.py3,889 bytes · SHA-256 | Documentation build tooling | inspect L17 main L56 Imports: |
tools/build_brand_assets.py6,367 bytes · SHA-256 | Documentation build tooling | luminance L30 vector_bytes L38 build L67 Imports: |
tools/build_site.py14,517 bytes · SHA-256 | Documentation build tooling | git L40 tracked_paths L44 source_link L49 describe L54 symbols_for L84 inventory L106 page L121 groups_html L134 inventory_html L152 build L173 Imports: |
tools/bull-production-provision.sh339 bytes · SHA-256 | Documentation build tooling | No Python API symbols. |
tools/cgroup_check.py5,296 bytes · SHA-256 | Documentation build tooling | counters L16 check_limits L20 Imports: |
tools/check_agent_cgroup.py1,977 bytes · SHA-256 | Documentation build tooling | main L14 Imports: |
tools/check_agent_dispatch.py3,594 bytes · SHA-256 | Documentation build tooling | main L20 Imports: |
tools/check_governed_agent.py4,424 bytes · SHA-256 | Documentation build tooling | main L20 Imports: |
tools/check_package.py3,963 bytes · SHA-256 | Documentation build tooling | main L19 Imports: |
tools/deployment_check.py19,704 bytes · SHA-256 | Documentation build tooling | save L32 digest L37 source_identity L42 probe_kvm L51 checked_assets L75 check_external L95 Checks L117 Checks.__init__ L118 Checks.record L121 Checks.command L125 Checks.pytest L158 main L172 Imports: |
tools/deployment_setup.py17,592 bytes · SHA-256 | Documentation build tooling | canonical_path L31 private_directory L38 private_read L46 secret_text L60 write_new L66 collector_url L75 public_key L86 policy_for L95 initialize L104 read_config L156 environment L181 isolated_environment L209 configure L216 check_cgroup L238 main L260 Imports: |
tools/fetch_guest_databases.sh1,435 bytes · SHA-256 | Documentation build tooling | No Python API symbols. |
tools/governed_agent.py13,592 bytes · SHA-256 | Documentation build tooling | digest L41 proposal L45 NoRedirect L61 NoRedirect.redirect_request L62 model_request L66 local_model L78 records L85 recover L92 identity_for L122 request_for L129 run L137 main L238 Imports: |
tools/hardware_approval_check.py2,743 bytes · SHA-256 | Documentation build tooling | main L19 Imports: |
tools/hardware_diagnostic.py303 bytes · SHA-256 | Documentation build tooling | No Python API symbols. Imports: |
tools/host_setup.py6,012 bytes · SHA-256 | Documentation build tooling | cgroup_parent L22 provision_cgroup L28 system_command L59 grant_kvm L66 main L86 Imports: |
tools/release_check.py5,499 bytes · SHA-256 | Documentation build tooling | main L23 Imports: |
wrangler.jsonc211 bytes · SHA-256 | Repository configuration, licensing or auxiliary file | No Python API symbols. |
