feat(agent): persist provenance and gate sensitive egress - #5821

Draft

RaresKeY wants to merge 21 commits into

odysseus-dev:devfrom

RaresKeY:feature/agent-provenance-controls

Commits on Aug 19, 2026

fix(sandbox): extract process execution boundary
RaresKeY
committed
a1a47d5
fix(agent): disable action approval gate
RaresKeY
committed
d5c6109
feat(agent): add exact approvals and run modes
RaresKeY
committed
8b74380
fix(agent): reconcile Windows execution profiles
RaresKeY
committed
4db59ea
fix(agent): migrate run mode across databases
RaresKeY
committed
86e5831
test(agent): align security mode integration
RaresKeY
committed
9e1390f
fix(agent): keep action approval gate disabled
RaresKeY
committed
f858a0c
fix(agent): prevent approval loops without bypassing run policy
RaresKeY
committed
aeaf3fc
test(agent): cover chat stream security mode route
RaresKeY
committed
d15dcb2
feat(agent): persist provenance and gate sensitive egress
RaresKeY
committed
12b7285
fix(agent): validate approval provenance on claim
RaresKeY
committed
4f782b7
fix(agent): migrate provenance across databases
RaresKeY
committed
f6ee4d9
test(agent): cover portable security migrations
RaresKeY
committed
2b1e739
fix(agent): classify external fetch provenance
RaresKeY
committed
0199a9c
test(agent): align provenance integration
RaresKeY
committed
e0b968a
fix(agent): preserve provenance on reviewed stack
RaresKeY
committed
d026a98
fix(agent): preserve disabled approval gate semantics
RaresKeY
committed
1c2d88a
fix(agent): keep run mode checks active
RaresKeY
committed
fbd0061
fix(agent): scope provenance gate to enabled policy
RaresKeY
committed
c9cfffd
fix(agent): preserve sandbox read policy
RaresKeY
committed
f77f981
fix(agent): retain private-read approval when enabled
RaresKeY
committed
3feac73

Navigation Menu

Uh oh!

feat(agent): persist provenance and gate sensitive egress - #5821

feat(agent): persist provenance and gate sensitive egress#5821
RaresKeY wants to merge 21 commits into
odysseus-dev:devfrom
RaresKeY:feature/agent-provenance-controls

Commits on Aug 19, 2026

fix(sandbox): extract process execution boundary

fix(agent): disable action approval gate

feat(agent): add exact approvals and run modes

fix(agent): reconcile Windows execution profiles

fix(agent): migrate run mode across databases

test(agent): align security mode integration

fix(agent): keep action approval gate disabled

fix(agent): prevent approval loops without bypassing run policy

test(agent): cover chat stream security mode route

feat(agent): persist provenance and gate sensitive egress

fix(agent): validate approval provenance on claim

fix(agent): migrate provenance across databases

test(agent): cover portable security migrations

fix(agent): classify external fetch provenance

test(agent): align provenance integration

fix(agent): preserve provenance on reviewed stack

fix(agent): preserve disabled approval gate semantics

fix(agent): keep run mode checks active

fix(agent): scope provenance gate to enabled policy

fix(agent): preserve sandbox read policy

fix(agent): retain private-read approval when enabled