feat(security): explicit agent turn origin + fail-closed approval gate + memory provenance by oxoxDev · Pull Request #3227 · tinyhumansai/openhuman

refactor(agent): add AgentTurnOrigin task-local for explicit turn provenance

oxoxDev

committed

feat(approval): make turn origin explicit in approval gate decision

oxoxDev

committed

feat(channels/web): scope WebChat turn origin around run_turn

oxoxDev

committed

feat(channels/runtime): propagate ExternalChannel origin to agent turn

oxoxDev

committed

feat(automation): scope TrustedAutomation origin for subconscious and cron turns

oxoxDev

committed

feat(agent): label remaining run_single entry points with explicit origins

oxoxDev

committed

feat(memory): track ExternalSync taint on memory entries

oxoxDev

committed

feat(policy): fail-closed Read default for unmapped channels + migration for existing installs

oxoxDev

committed

chore(memory): default MemoryTaint::Internal on all in-tree constructors

oxoxDev

committed

feat(security/policy): reject leading env-var assignments in shell commands

oxoxDev

committed

test(agent_tool_policy): align prompt-boundary test with new fail-closed default

oxoxDev

committed

fix(policy): preserve legacy empty-map unrestricted in engine; migration carries hardening

oxoxDev

committed

style: cargo fmt + tighten migrate_channel_permissions_if_legacy semantics

oxoxDev

committed

chore(security,config): docstring polish + drop redundant trim_start

oxoxDev

committed

feat(memory_store): track taint provenance on namespace document DTOs

oxoxDev

committed

feat(memory_store): add taint column with idempotent ALTER TABLE migration

oxoxDev

committed

feat(memory_store): persist and surface taint on document upsert and recall

oxoxDev

committed

feat(memory): expose store_with_taint and surface real taint in recall

oxoxDev

committed

feat(memory_sync): mark composio-ingested chunks with ExternalSync taint

oxoxDev

committed

feat(subconscious): upgrade tick origin to SubconsciousTainted when context contains external-sync chunks

oxoxDev

committed

test(memory): regression coverage for taint persistence and origin upgrade

oxoxDev

committed

fix(memory): fail closed on unknown memory_docs.taint values

oxoxDev

committed

docs(memory_store): note fail-closed unknown-taint behavior at load site

oxoxDev

committed

fix(meet_agent): classify live-meeting turns as ExternalChannel not Cli

oxoxDev

committed

docs(config): correct channel_permissions empty-map runtime semantics

oxoxDev

committed

fix(agent/turn_origin): box-pin scoped future to keep agent loop off worker stack

oxoxDev

committed

test(approval): scope WebChat origin in worker_b raw-coverage e2e

oxoxDev

committed

test(approval): align tool_registry approval e2e with explicit-origin gate

oxoxDev

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(security): explicit agent turn origin + fail-closed approval gate + memory provenance#3227

feat(security): explicit agent turn origin + fail-closed approval gate + memory provenance#3227
senamakel merged 33 commits into
tinyhumansai:mainfrom
oxoxDev:feat/approval-origin-fail-closed

Commits on Jun 2, 2026

refactor(agent): add AgentTurnOrigin task-local for explicit turn provenance

feat(approval): make turn origin explicit in approval gate decision

feat(channels/web): scope WebChat turn origin around run_turn

feat(channels/runtime): propagate ExternalChannel origin to agent turn

feat(automation): scope TrustedAutomation origin for subconscious and cron turns

feat(agent): label remaining run_single entry points with explicit origins

feat(memory): track ExternalSync taint on memory entries

feat(policy): fail-closed Read default for unmapped channels + migration for existing installs

chore(memory): default MemoryTaint::Internal on all in-tree constructors

feat(security/policy): reject leading env-var assignments in shell commands

test(agent_tool_policy): align prompt-boundary test with new fail-closed default

fix(policy): preserve legacy empty-map unrestricted in engine; migration carries hardening

style: cargo fmt + tighten migrate_channel_permissions_if_legacy semantics

chore(security,config): docstring polish + drop redundant trim_start

feat(memory_store): track taint provenance on namespace document DTOs

feat(memory_store): add taint column with idempotent ALTER TABLE migration

feat(memory_store): persist and surface taint on document upsert and recall

feat(memory): expose store_with_taint and surface real taint in recall

feat(memory_sync): mark composio-ingested chunks with ExternalSync taint

feat(subconscious): upgrade tick origin to SubconsciousTainted when context contains external-sync chunks

test(memory): regression coverage for taint persistence and origin upgrade

fix(memory): fail closed on unknown memory_docs.taint values

docs(memory_store): note fail-closed unknown-taint behavior at load site

fix(meet_agent): classify live-meeting turns as ExternalChannel not Cli

docs(config): correct channel_permissions empty-map runtime semantics

fix(agent/turn_origin): box-pin scoped future to keep agent loop off worker stack

test(approval): scope WebChat origin in worker_b raw-coverage e2e

test(approval): align tool_registry approval e2e with explicit-origin gate

Commits on Jun 3, 2026

Merge branch 'main' into pr/3227

fix(agent/bus): remove duplicate doc comment on AgentTurnRequest

fix(skills): inherit parent turn origin in spawned skill runs

fix(memory_store): preserve taint in get() and list() paths

test(memory_store/safety): add taint preservation regression test