trevon/glove
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
122 commits 18 branches 0 tags 1.9 MiB
  • C++ 96%
  • CMake 1.6%
  • Shell 1.3%
  • Python 1.1%
Find a file
Exact
0xkite 09d34002a6
 Merge PR #25 (guest channel layer) into PR #24 (wallet stack + Apple repairs) 
Combine maintainer/wallet-status-and-apple-repairs (18e75af8) with
maintainer/guest-channel-layer (00d7c473) into a single validated
integration branch for Ghost deployment testing.

Merge resolution decisions:

- Apple container runtime (the known conflict zone) auto-merged
  textually and was verified semantically against both parents:
  the maintainer hard-disable survives (lifecycle_operational()
  returns false unconditionally, apple_container_session_runtime.hpp),
  the sampler/finalizer jthread lifecycle seam and the finalizer
  catch-all well-formed terminal state (a96ab1e) are intact, and
  null_terminated=false strict_json_options is preserved. Velinus's
  observation-intent integration lands adapted on the repaired base:
  prepare_observation_service is only reachable from start(), which
  denies before side effects when the lifecycle is disabled, so the
  observation service never constructs on the disabled Apple path.
  The gated test from PR #25 (every control method refuses before
  side effect; record counts unchanged) survives.
- GLOVE_GUEST_OBSERVATION_* env names kept; observation socket/token
  volumes still mount only when observation_service->active().
- guest_channel layer, host-registered schema admission
  (channel_descriptor/channel_host), SO_PEERCRED/LOCAL_PEERCRED, LRU
  replay cache, bounded retry, fail-closed recovery, and
  channel_identifier_grammar.hpp land as-is; session_registry files
  did not conflict with PR #24's side.
- Wallet status files: PR #25's delta did not touch them, so the
  harness-neutral renames (wallet_status_projection_channel) stand
  unchanged.

Validation (umask 0022): dev/asan/tsan presets build clean and
CTest 80/80 each (control_apple_container_session_runtime
env-gated/skipped as expected); clang-format (llvm@22) applied to
changed sources; git diff --check clean. No push.
2026-08-29 16:23:23 -06:00
.agents/skills/glove-cpp-change fix: close Apple lifecycle review gaps 2026-08-28 21:53:35 -04:00
.github fix(ci): isolate namespace test leak tracing 2026-08-14 17:50:56 -06:00
benchmarks perf(mcp): add validation benchmark 2026-07-21 22:24:49 -04:00
cmake fix(ci): validate complete fuzzer policies 2026-08-14 16:10:42 -06:00
dockerfiles feat(remote): add construction-only backend 2026-08-07 22:27:35 -04:00
docs Merge PR #25 (guest channel layer) into PR #24 (wallet stack + Apple repairs) 2026-08-29 16:23:23 -06:00
fuzz fix(control): bind Pi wallet status content to connected state and harden wallet fuzz clock 2026-08-29 10:49:09 -06:00
include/glove Merge PR #25 (guest channel layer) into PR #24 (wallet stack + Apple repairs) 2026-08-29 16:23:23 -06:00
packaging feat(refinement): evaluate fixtures in sandbox 2026-07-31 16:07:43 -04:00
scripts feat(control): add Glove wallet status bridge core 2026-08-29 09:47:49 -06:00
src Merge PR #25 (guest channel layer) into PR #24 (wallet stack + Apple repairs) 2026-08-29 16:23:23 -06:00
tests Merge PR #25 (guest channel layer) into PR #24 (wallet stack + Apple repairs) 2026-08-29 16:23:23 -06:00
tools feat(remote): add construction-only backend 2026-08-07 22:27:35 -04:00
.clang-format Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
.clang-tidy Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
.dockerignore feat(host): guide managed harness setup 2026-07-29 16:15:04 -04:00
.editorconfig Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
.gitignore feat(control): add Glove wallet status bridge core 2026-08-29 09:47:49 -06:00
AGENTS.md Add Codex engineering workflow 2026-07-19 21:09:24 -04:00
CMakeLists.txt feat(remote): add construction-only backend 2026-08-07 22:27:35 -04:00
CMakePresets.json test(fuzz): cover untrusted parser boundaries 2026-07-21 22:23:45 -04:00
CREDITS.md Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
LICENSE Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
README.md fix(onboarding): harden setup plan 2026-08-03 09:19:50 -04:00
setup.sh build: select compatible C++ runtime 2026-07-29 17:32:40 -04:00

README.md

Glove

Glove contains an LLM agent in an OS-enforced sandbox. It denies files, environment, network, and tool access unless an operator grants them explicitly.

Status: research prototype. Remote Sage launch remains disabled until its lifecycle, approval, and resource-enforcement contracts are complete.

Start here

./setup.sh

For development:

cmake --preset dev
cmake --build --preset dev
ctest --preset dev

Use docs/build.md for prerequisites, controlled/offline builds, and Linux runtime requirements. Use docs/host-setup.md to plan and apply owner-local managed session setup.

Why Glove

Glove is a containment boundary, not a prompt-injection detector or a complete host-security boundary. The motivation, trust boundaries, and residual risks are in docs/architecture.md and docs/threat-model.md.

Documentation

License

Glove is licensed under GPL-3.0-only. See CREDITS.md for dependency licenses and research references.