No description
  • C++ 96%
  • CMake 1.6%
  • Shell 1.3%
  • Python 1.1%
Find a file
0xkite 18e75af876
refactor(control): make the wallet status projection channel harness-neutral
Sage scoping finding (owner directive: Glove must stay general): the
reusable seam was named after a single harness. Rename the virtual
channel interface to wallet_status_projection_channel and the options
struct to wallet_status_projection_options; any guest harness may now
implement the seam. The concrete wallet_pi_status_adapter keeps its
Pi name with the explicit "Pi-shaped projection only" caveat, keeping
the general mechanism honest about which projections are Pi-specific.

No behavior change; mechanical rename. Validation (umask 0022):
dev CTest 79/79, ASan/UBSan 79/79, TSan 79/79; clang-format clean;
git diff --check clean.
2026-08-29 14:18:35 -06:00
.agents/skills/glove-cpp-change fix: close Apple lifecycle review gaps 2026-08-28 21:53:35 -04:00
.github fix(ci): isolate namespace test leak tracing 2026-08-14 17:50:56 -06:00
benchmarks perf(mcp): add validation benchmark 2026-07-21 22:24:49 -04:00
cmake fix(ci): validate complete fuzzer policies 2026-08-14 16:10:42 -06:00
dockerfiles feat(remote): add construction-only backend 2026-08-07 22:27:35 -04:00
docs fix(control): bind Pi wallet status content to connected state and harden wallet fuzz clock 2026-08-29 10:49:09 -06:00
fuzz fix(control): bind Pi wallet status content to connected state and harden wallet fuzz clock 2026-08-29 10:49:09 -06:00
include/glove Merge current PR #23 head 4097a21 with validated Apple repairs 2026-08-29 09:41:16 -06:00
packaging feat(refinement): evaluate fixtures in sandbox 2026-07-31 16:07:43 -04:00
scripts feat(control): add Glove wallet status bridge core 2026-08-29 09:47:49 -06:00
src refactor(control): make the wallet status projection channel harness-neutral 2026-08-29 14:18:35 -06:00
tests refactor(control): make the wallet status projection channel harness-neutral 2026-08-29 14:18:35 -06:00
tools feat(remote): add construction-only backend 2026-08-07 22:27:35 -04:00
.clang-format Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
.clang-tidy Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
.dockerignore feat(host): guide managed harness setup 2026-07-29 16:15:04 -04:00
.editorconfig Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
.gitignore feat(control): add Glove wallet status bridge core 2026-08-29 09:47:49 -06:00
AGENTS.md Add Codex engineering workflow 2026-07-19 21:09:24 -04:00
CMakeLists.txt feat(remote): add construction-only backend 2026-08-07 22:27:35 -04:00
CMakePresets.json test(fuzz): cover untrusted parser boundaries 2026-07-21 22:23:45 -04:00
CREDITS.md Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
LICENSE Initial Glove sandbox baseline 2026-07-19 21:06:11 -04:00
README.md fix(onboarding): harden setup plan 2026-08-03 09:19:50 -04:00
setup.sh build: select compatible C++ runtime 2026-07-29 17:32:40 -04:00

Glove

Glove contains an LLM agent in an OS-enforced sandbox. It denies files, environment, network, and tool access unless an operator grants them explicitly.

Status: research prototype. Remote Sage launch remains disabled until its lifecycle, approval, and resource-enforcement contracts are complete.

Start here

./setup.sh

For development:

cmake --preset dev
cmake --build --preset dev
ctest --preset dev

Use docs/build.md for prerequisites, controlled/offline builds, and Linux runtime requirements. Use docs/host-setup.md to plan and apply owner-local managed session setup.

Why Glove

Glove is a containment boundary, not a prompt-injection detector or a complete host-security boundary. The motivation, trust boundaries, and residual risks are in docs/architecture.md and docs/threat-model.md.

Documentation

License

Glove is licensed under GPL-3.0-only. See CREDITS.md for dependency licenses and research references.