Author ward inspect + per-host passthrough guardfiles (Phase 2 of cli-guard#157, release-gated) #223

New issue

Closed

opened 2026-06-19 08:42:55 +00:00 by coilyco-ops · 3 comments

coilyco-ops commented

2026-06-19 08:42:55 +00:00

Member

Recovered from a local session transcript (2026-06-19) that was never filed. The agent stated verbatim it did not file this ward-side half ("I did not file the ward issue yet" - infrastructure session 0a1b3820 L179).

Context

This is Phase 2 of the inspect-tier design. The cli-guard grammar half - the allow <bin...> inspect-list passthrough keyword - was filed as cli-guard#157. This ward-side rollout was deliberately deferred because it is blocked on a cli-guard release shipping the allow keyword.

Scope (the deferred work)

Author inspect.guardfile.kdl - a flat allow list of read-only binaries (grep tail cat jq ps df ...).
Add per-command host-tier passthrough files for privileged-but-read inspection (systemctl status, iptables -L, etc.), each a small 3-line git-blameable file (one command per file, so changes are reviewable).
Bump the cli-guard dependency to the release that ships allow.
Wire the new guardfile into lockdown rendering.
Update docs/FEATURES.md.

Blocking / sequencing

Blocked on cli-guard#157 landing in a tagged cli-guard release. Start once that release is consumable.

**Recovered from a local session transcript (2026-06-19)** that was never filed. The agent stated verbatim it did **not** file this ward-side half ("I did **not** file the ward issue yet" - infrastructure session `0a1b3820` L179). ## Context This is **Phase 2** of the inspect-tier design. The cli-guard **grammar** half - the `allow <bin...>` inspect-list passthrough keyword - was filed as **cli-guard#157**. This ward-side rollout was deliberately deferred because it is **blocked on a cli-guard release** shipping the `allow` keyword. ## Scope (the deferred work) - Author `inspect.guardfile.kdl` - a flat `allow` list of read-only binaries (`grep tail cat jq ps df` ...). - Add per-command host-tier passthrough files for privileged-but-read inspection (`systemctl status`, `iptables -L`, etc.), each a small 3-line git-blameable file (one command per file, so changes are reviewable). - Bump the cli-guard dependency to the release that ships `allow`. - Wire the new guardfile into lockdown rendering. - Update `docs/FEATURES.md`. ## Blocking / sequencing Blocked on cli-guard#157 landing in a tagged cli-guard release. Start once that release is consumable.

coilyco-ops added the

consult

labels

2026-06-24 04:15:50 +00:00

coilyco-ops commented

2026-06-24 17:27:29 +00:00

Author

Member

Re-triage (goose-triage method, claude-macos-kais-macbook-pro-2 as the judgment engine, 2026-06-24)

P3 - Real ward inspect/passthrough guardfile work, kept, but blocked on a cli-guard release.
consult - Blocked on an upstream release and is a security surface, human-gated until consumable.

**Re-triage** (goose-triage method, claude-macos-kais-macbook-pro-2 as the judgment engine, 2026-06-24) - **P3** - Real ward inspect/passthrough guardfile work, kept, but blocked on a cli-guard release. - **consult** - Blocked on an upstream release and is a security surface, human-gated until consumable.

coilyco-ops commented

2026-06-24 17:29:49 +00:00

Author

Member

Re-triage (goose-triage method, claude-macos-kais-macbook-pro-2 as the judgment engine, 2026-06-24)

P3 - Real ward inspect/passthrough guardfile work, kept, but blocked on a cli-guard release.
consult - Blocked on an upstream release and is a security surface, human-gated until consumable.