Epic 7.2: SkillGuard Quality Gates + Blocklist Hardening#55
Merged
Conversation
…d wraps ReviewGate+Store for pre-persist review - Wire guarded_evolve/save into all 3 evolution strategies - Add 7 blocklist categories: os.exec*, os.spawn*, breakpoint, shutil, os.remove, os.chmod - 20 new tests (2040 total passed)
🔒 Phase Gate Enforcement — 🚫 FAIL
Verdict: FAIL
|
added 5 commits
April 7, 2026 07:57
…CAL, API fix - Check guard result in all 3 strategies - return None + cleanup on rejection - Elevate getattr to CRITICAL (blocklist bypass vector) - Fix load_record API mismatch in guarded_reactivate - Add bare-name targets for alias bypass (from os import execvp) - Add 4 new blocklist categories: pty, code, http exfil, marshal/runpy - Add 10 adversarial tests (alias bypass, extended blocklist, guard rejection) - 2049 tests passing
…rs, os.* import rule - evolve_fix snapshots parent dir BEFORE edit, restores on rejection (P0) - evolve_derived/captured rmtree on rejection (already done) - Add bare names for remove/unlink/rmdir/chmod/chown (alias bypass) - Add os.* Import rule to catch from os import star - 2049 tests passing
…s_bypass CRITICAL pattern (eval, exec, __import__, compile, getattr, setattr, globals, locals, open) - Add builtins.* HIGH Import pattern - 3 adversarial tests for builtins bypass vectors - 2052 tests passing
…ules - Add __builtins__ Attribute CRITICAL (eval, exec, __import__, __dict__) - Add sys.modules CRITICAL Attribute + sys.* Import HIGH - Deep rollback with rglob for subdirectory files in evolve_fix - Add Import rules for runpy, signal, webbrowser - Add bare-name targets for run_module, run_path - 5 new adversarial tests (2056 total, 0 failures)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Epic 7.2: SkillGuard Quality Gates
What
Pre-persist quality gate ensuring every skill mutation passes ReviewGate BEFORE storage. Hardened AST blocklist with 7 new categories.
Changes
Metrics