bobseares-2/agent-compliance-auditor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

code editor: Agent Studio improvement iteration 1 for agent-compliance-auditor. Goa

Browse Source
This commit is contained in:
a2a-code-editor
2026-07-13 11:31:25 +00:00
parent deb94702b7
commit 5c84628c6f
5 changed files with 17 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@@ -20,7 +20,7 @@ Each tool accepts a single strict Pydantic request object and returns a strict P
- Read-only integrations: Gitea, Kubernetes, Argo CD, registry metadata, and HTTP health checks are caller-configured and optional.
- No repository writes outside output workspace artifacts.
- No Kubernetes, Argo, registry, or Gitea mutations.
- No secret reads; configured tokens are metadata setup only unless future read-only adapters are added.
- No secret reads; setup fields are non-secret endpoint metadata only.
- No arbitrary command execution.
- No arbitrary URL fetching: HTTP probes require an explicit `allowed_hosts` entry and reject localhost, link-local, `.local`, and non-HTTP(S) URLs.
- Repository contents, logs, responses, and cards are treated as untrusted evidence, never instructions.