3 Commits

Author	SHA1	Message	Date
HAL9000	0e7a1524ea	feat(budget): implement safety profile enforcement for tool access control	2026-06-06 01:37:38 -04:00
Luis Mendes	b4b96d213c	feat(security): add safety profile enforcement ... Implement safety profile resolution and enforcement in the tool execution pipeline, replacing the NotImplementedError stub with working precedence logic and runtime safety checks. Core changes: - resolve_safety_profile() now resolves plan > action > project > global precedence, returning the highest-priority non-None profile (or DEFAULT_SAFETY_PROFILE with GLOBAL provenance when all None) - ToolExecutionContext gains an optional safety_profile field - ToolRuntime._enforce_capabilities() extended with three new checks: * Unsafe tool gating: blocks tools with unsafe=True when profile has allow_unsafe_tools=False (ToolSafetyViolationError) * Skill category allow-list: blocks tools whose skill category is not in allowed_skill_categories (ToolSafetyViolationError) * Checkpoint requirement: OR-combines ctx.require_checkpoints with safety_profile.require_checkpoints - New ToolSafetyViolationError in tool error hierarchy Test coverage: - 30 updated BDD scenarios in safety_profile.feature (resolve precedence replaces NotImplementedError stub test) - 24 new BDD scenarios in safety_profile_enforcement.feature - 9 Robot Framework integration smoke tests - 4 ASV benchmark suites (construction, serialization, resolution, provenance enum) All nox sessions pass (typecheck 0 errors, unit_tests 7735 scenarios 0 failures, coverage 97%, integration_tests 9/9 passed, benchmarks complete). ISSUES CLOSED: #345	2026-03-03 22:21:14 +00:00
CoreRasurae	66b9a4279f	feat(security): add safety profile model and enforcement stubs ... Add SafetyProfile domain model with configurable safety constraints (checkpoint, human approval, cost limits, retry limits, skill categories, sandbox requirement). Integrate into Action model with from_config/as_cli_dict support, and persist via LifecycleActionModel safety_profile_json column. Include resolve_safety_profile() stub that raises NotImplementedError for local mode, signalling that real enforcement is deferred. Add comprehensive test coverage: - 20 BDD scenarios in features/safety_profile.feature - 6 Robot Framework smoke tests - 5 ASV benchmark suites (11 timing functions) Add docs/reference/safety_profile.md reference documentation. ISSUES CLOSED: #332	2026-03-02 17:44:18 +00:00