Skip to content

OpenShell fail-closed policy attestation #287

Description

@KyleZheng1284

OpenShell is not truly job-scoped in the provided config. The code normalizes a job-scoped name, but then attaches to the configured providers.openshell.sandbox_name when present, and the example uses one fixed aiq-openshell-demo sandbox with delete_on_exit: false

Originally posted by @cdgamarose-nv in #280 (comment)

  • the provider still declares capabilities without verifying the attached sandbox's applied policy/network mode; tracked as a follow-up pending OpenShell SDK introspection.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions