- C++ 96%
- CMake 1.6%
- Shell 1.3%
- Python 1.1%
3ba6ce46a1Revalidation walked immutable payloads depth-first while planning hashed a flat lexicographic path sequence. Sort bounded descriptor-safe records before hashing so valid adopted Pi packages retain their canonical identity. |
||
|---|---|---|
| .github | ||
| benchmarks | ||
| cmake | ||
| dockerfiles | ||
| docs | ||
| fuzz | ||
| include/glove | ||
| packaging | ||
| scripts | ||
| src | ||
| tests | ||
| tools | ||
| .clang-format | ||
| .clang-tidy | ||
| .dockerignore | ||
| .editorconfig | ||
| .gitignore | ||
| AGENTS.md | ||
| CMakeLists.txt | ||
| CMakePresets.json | ||
| CREDITS.md | ||
| LICENSE | ||
| README.md | ||
| setup.sh | ||
Glove
Glove contains an LLM agent in an OS-enforced sandbox. It denies files, environment, network, and tool access unless an operator grants them explicitly.
Status: research prototype. Remote Sage launch remains disabled until its lifecycle, approval, and resource-enforcement contracts are complete.
Start here
./setup.sh
For development:
cmake --preset dev
cmake --build --preset dev
ctest --preset dev
Use docs/build.md for prerequisites, controlled/offline
builds, and Linux runtime requirements. Use
docs/host-setup.md to plan and apply owner-local managed
session setup.
Why Glove
Glove is a containment boundary, not a prompt-injection detector or a complete
host-security boundary. The motivation, trust boundaries, and residual risks
are in docs/architecture.md and
docs/threat-model.md.
Documentation
docs/build.md— build and validationdocs/host-setup.md— owner-local machine setupdocs/session-policy.md— managed-session policy contractdocs/hostile-content-analysis.md— offline hostile-content profiledocs/quickstart.md— local containment commandsdocs/future-work.md— unsupported and planned work
License
Glove is licensed under GPL-3.0-only. See CREDITS.md for dependency licenses and research references.