feat(spider-sense): promote to first-class built-in guard#161

Merged

bb-connor merged 48 commits intomainfrom

Mar 4, 2026

Commits on Mar 4, 2026

feat(spider-sense): promote to first-class built-in guard across all SDKs

bb-connor
and
claude
committed
fix(spider-sense): harden fail-closed paths and cross-SDK parity

bb-connor
and
claude
committed
fix(spider-sense): address PR review comments

bb-connor
and
claude
committed
feat(spider-sense): add cross-sdk provider parity, integrity, metrics, and conformance
bb-connor
committed
feat(spider-sense): harden provider path, trust controls, and conformance
bb-connor
committed
fix(spider-sense): resolve review blockers and CI regressions
bb-connor
committed
fix(openclaw): execute canonical spider-sense and bundle TS builtin DB
bb-connor
committed
test(spider-sense): enforce s2bench pattern DB sync
bb-connor
committed
fix(spider-sense): resolve new review threads and CI regressions
bb-connor
committed
fix(spider-sense): fail closed on invalid policy toggles and load races
bb-connor
committed
fix(hush-py): align spider_sense parser error text with mapping-only schema
bb-connor
committed
feat(spider-sense): add full threat-intel example and rust v1.3 config parity
bb-connor
committed
fix(spider-sense): preserve legacy LLM config and trim example dead code
bb-connor
committed
docs(examples): clarify first-class spider-sense vs custom action payload
bb-connor
committed
fix(spider-sense): resolve review findings and unblock CI
bb-connor
committed
fix(spider-sense): fail closed and dedupe migration config
bb-connor
committed
fix(spider-sense): verify signed manifest before DB path resolution
bb-connor
committed
fix(spider-sense): allow external trust-store key identifiers
bb-connor
committed
fix(openclaw): honor spider-sense toggle and gate full-only test
bb-connor
committed
fix(spider-sense): enforce direct DB integrity and policy-event parse
bb-connor
committed
docs(readme): link spider-sense quickstart to full example
bb-connor
committed
fix(spider-sense): close TS asset path and legacy OpenClaw no-ops
bb-connor
committed
docs(readme): move spider-sense quickstart below observe sdk examples
bb-connor
committed
fix(openclaw): allow spider_sense true when executable custom guard exists
bb-connor
committed
fix(policy): deep-merge spider-sense inherited config
bb-connor
committed
fix(spider-sense): preserve explicit defaults and bundle crate assets
bb-connor
committed
fix(cli): format daemon start log for CI
bb-connor
committed
fix(spider-sense): handle fallback overrides and boolean toggles
bb-connor
committed
Merge remote-tracking branch 'origin/main' into feat/ocsf
bb-connor
committed
fix(spider-sense): clarify programmatic merge and path resolution
bb-connor
committed
fix(spider-sense-ts): align trust keys and deep-path template parity
bb-connor
committed
fix(spider-sense): harden manifest parsing and defaults
bb-connor
committed
fix(hush-ts): reject non-executable spider_sense boolean enable
bb-connor
committed
fix(spider-sense): restore merge_with partial-merge semantics
bb-connor
committed
fix(openclaw): honor policy spider_sense disable for custom guard
bb-connor
committed
fix(spider-sense): allow merge_with enabled=false overrides
bb-connor
committed
fix(spider-sense): handle OpenClaw runtime + serde-default merge
bb-connor
committed
fix(spider-sense): address review findings on merge + pattern DB
bb-connor
committed
fix(spider-sense): tighten enabled heuristic for serde defaults
bb-connor
committed
fix(spider-sense): preserve enabled override in heuristic merge
bb-connor
committed
fix(openclaw): fail closed on spider-sense provider/integrity errors
bb-connor
committed
fix(spider-sense): avoid serde-default auto-enable in heuristic merge
bb-connor
committed
fix(spider-sense): deny on invalid query embedding shape
bb-connor
committed
fix(spider-sense): harden merge metadata and pattern parsing
bb-connor
committed
fix(spider-sense): tighten enabled merge semantics
bb-connor
committed
fix(spider-sense): resolve new merge and trust-store review findings
bb-connor
committed
fix(openclaw): harden spider-sense path and threshold validation
bb-connor
committed
fix(spider-sense): avoid implicit heuristic re-enable from defaults
bb-connor
committed