feat: lean Grok 1.0.34 broker worker with enforced tool, model and isolation policy - #25

Open

apresmoi wants to merge 26 commits into

fix/codex-overlapping-denialsfrom

feat/grok-lean-broker

Commits on Sep 17, 2026

feat: pin Grok CLI 1.0.34 lean worker contract and single config renderer
apresmoi
committed
551f596
feat: refuse Grok broker requests outside the lean tool set and declared model policy
apresmoi
committed
18b9d48
feat: attest Grok 1.0.34 sandbox events, deny lists and read-only worker home
apresmoi
committed
8dbd8c0
fix: register direct Grok MCP endpoints in the Daimon-owned GROK_HOME config
apresmoi
committed
dcfdc8a
feat: compile the lean Grok worker argv and system prompt into the native launcher
apresmoi
committed
7529ef9
build: rebuild native engine broker artifacts for the lean Grok worker argv
apresmoi
committed
4bbf224
fix: keep the sealed prompt fd open across the Grok worker exec
apresmoi
committed
9761d8d
build: rebuild native engine broker artifacts with the prompt fd fix
apresmoi
committed
883111c
fix: pass the Grok provider capability through env_key because 1.0.34 never runs auth_provider helpers
apresmoi
committed
f41774e
build: rebuild native engine broker artifacts with the provider capability env
apresmoi
committed
7f5b62b
docs: document the Grok 1.0.34 lean worker contract and worker home layout
apresmoi
committed
4bd43d3
docs: point the worker argv mirror comment at launcherArgv.test.ts
apresmoi
committed
0e09c75
test: give Grok direct-session tests a GROK_HOME and unpool proxy rejection requests
apresmoi
committed
596a87d
fix: escape control characters in the sandbox deny-path regex and forbid raw control bytes in sources
apresmoi
committed
18c2653
fix: forward the validated Grok request object and refuse unknown top-level members
apresmoi
committed
838b507
fix: send the Grok session-title request to the broker proxy where it is refused before any spend
apresmoi
committed
5fe9374
fix: give Grok workers /dev/null stdin and keep the executable fd out of the worker
apresmoi
committed
08ceda6
build: rebuild native engine broker artifacts with the worker fd hardening
apresmoi
committed
cd33c5f
test: cover capability expiry on the proxy token lookups
apresmoi
committed
0878c97
fix: lock each Grok turn to the ProfileApplied event accepted before its first model request
apresmoi
committed
b1823ec
test: cover worker home, hard link and read stability checks in Grok attestation
apresmoi
committed
fdbc7a0
test: prove the Grok isolation guard gates the first upstream call of a turn
apresmoi
committed
a78a993
fix: require the opened Grok worker config to be the inode attested by lstat
apresmoi
committed
ad67499
fix: refuse __proto__ members and extra tool members in Grok broker requests
apresmoi
committed
f4fe7f3
test: prove a Grok worker that fails at exec runs nothing
apresmoi
committed
b55f678
test: drop unused imports from Grok attestation tests
apresmoi
committed
85bb357

Navigation Menu

feat: lean Grok 1.0.34 broker worker with enforced tool, model and isolation policy - #25

feat: lean Grok 1.0.34 broker worker with enforced tool, model and isolation policy#25
apresmoi wants to merge 26 commits into
fix/codex-overlapping-denialsfrom
feat/grok-lean-broker

Commits on Sep 17, 2026

feat: pin Grok CLI 1.0.34 lean worker contract and single config renderer

feat: refuse Grok broker requests outside the lean tool set and declared model policy

feat: attest Grok 1.0.34 sandbox events, deny lists and read-only worker home

fix: register direct Grok MCP endpoints in the Daimon-owned GROK_HOME config

feat: compile the lean Grok worker argv and system prompt into the native launcher

build: rebuild native engine broker artifacts for the lean Grok worker argv

fix: keep the sealed prompt fd open across the Grok worker exec

build: rebuild native engine broker artifacts with the prompt fd fix

fix: pass the Grok provider capability through env_key because 1.0.34 never runs auth_provider helpers

build: rebuild native engine broker artifacts with the provider capability env

docs: document the Grok 1.0.34 lean worker contract and worker home layout

docs: point the worker argv mirror comment at launcherArgv.test.ts

test: give Grok direct-session tests a GROK_HOME and unpool proxy rejection requests

fix: escape control characters in the sandbox deny-path regex and forbid raw control bytes in sources

fix: forward the validated Grok request object and refuse unknown top-level members

fix: send the Grok session-title request to the broker proxy where it is refused before any spend

fix: give Grok workers /dev/null stdin and keep the executable fd out of the worker

build: rebuild native engine broker artifacts with the worker fd hardening

test: cover capability expiry on the proxy token lookups

fix: lock each Grok turn to the ProfileApplied event accepted before its first model request

test: cover worker home, hard link and read stability checks in Grok attestation

test: prove the Grok isolation guard gates the first upstream call of a turn

fix: require the opened Grok worker config to be the inode attested by lstat

fix: refuse proto members and extra tool members in Grok broker requests

test: prove a Grok worker that fails at exec runs nothing

test: drop unused imports from Grok attestation tests