Add native Guardian permission policy - #4155

Closed

gagan114662 wants to merge 35 commits into

gagan114662:feat/guardian-native-policy

Commits on Jul 28, 2026

feat(acp): add isolated browser MCP bridge
gagan114662
committed
740edf7
Merge pull request #1 from gagan114662/fix/acp-browser-broker
gagan114662
authored
bd5e2dc

Commits on Jul 30, 2026

Add local Guardian findings to agent observer (#2)
gagan114662
authored
9bee25b
Harden local Guardian findings integration
gagan114662
committed
caca640

Commits on Jul 31, 2026

fix(desktop): close Guardian review blockers
gagan114662
committed
a26727b
Merge pull request #3 from gagan114662/feat/numbat-sidecar
gagan114662
authored
6130a38
Bind Numbat findings to managed agents
gagan114662
committed
bbb4aae
Merge pull request #4 from gagan114662/fix/numbat-agent-identity
gagan114662
authored
0bea97f
Clear desktop check debt
gagan114662
committed
4b17b9d
Merge pull request #5 from gagan114662/fix/guardian-followups
gagan114662
authored
511d744
Complete Guardian finding control loop
gagan114662
committed
93a12ed
Merge pull request #6 from gagan114662/fix/guardian-e2e-correlation
gagan114662
authored
946fd6d
feat(guardian): verify callbacks and bound retention
gagan114662
committed
0c2e81e

Commits on Aug 1, 2026

Commits on Aug 2, 2026

feat(guardian): integrate native policy and observer controls
gagan114662
committed
f9dd575
feat(guardian): manage verified Numbat lifecycle
gagan114662
committed
d6a61a7
fix(guardian): reject symlinked component stores
gagan114662
committed
fb5fd67
feat(guardian): report and cancel installs
gagan114662
committed
a57fa58
feat(guardian): retain one verified rollback version
gagan114662
committed
7075f2d
feat(guardian): bundle verified launcher
gagan114662
committed
75ff6d9
test(guardian): cover private Mac install state
gagan114662
committed
8b011b0
fix(guardian): preserve deploy policy after rebase
gagan114662
committed
14e4776
fix(guardian): address review portability gaps
gagan114662
committed
ecaf9be
fix(guardian): close raw policy editor bypass
gagan114662
committed
6766632
feat(guardian): publish fail-closed runtime coverage
gagan114662
committed
8a9e233

Commits on Aug 3, 2026

Merge current main into Guardian integration
gagan114662
committed
cdbd55c
Merge fork main into Guardian integration
gagan114662
committed
cf19cea

Commits on Aug 4, 2026

fix: clear Guardian CI ratchets
gagan114662
committed
b6414cf
fix: match Guardian merge checks
gagan114662
committed
054d14e
ci: keep pull request image caches read-only
gagan114662
committed
9d5915d
Fix remaining Guardian CI failures
gagan114662
committed
6dc80d2
fix(guardian): use stable Windows file identity
gagan114662
committed
e295704
style(guardian): match pinned Rust formatter
gagan114662
committed
a1cbda4
fix(guardian): make Windows storage tests portable
gagan114662
committed
e111cac