Cyber: self-verifying generation + real-container backing (leak oracle, LLM admission)#266

Merged

larstalian merged 26 commits into

mainfrom

feat/cyber-verification-ceiling

Jun 12, 2026

Commits on Jun 12, 2026

feat(cyber): live leak/consequence oracle (§8.3 spine) + self-verification indictment

larstalian
and
claude
committed
fix(cyber): harden the leak oracle — encoded exfil + containment (closes #259 review)

larstalian
and
claude
committed
chore(cyber): drop the one-off indictment experiment scaffolding

larstalian
and
claude
committed
style(cyber): .rules comment cleanup

larstalian
and
claude
committed
feat(cyber): M0 — dynamic admission gate for LLM-realized handlers (#260)

larstalian
and
claude
committed
fix(cyber): typecheck — type the exec namespace as dict[str, Any]

larstalian
and
claude
committed
test(cyber): M0 — prove the realization loop end to end

larstalian
and
claude
committed
feat(examples): cyber_realize — close the M0 loop with a real LLM (codex harness)

larstalian
and
claude
committed
feat(llm): ClaudeBackend — drive the claude CLI as an LLM backend

larstalian
and
claude
committed
feat(cyber): M1 first brick — run a world in a real container (#252)

larstalian
and
claude
committed
feat(cyber): M1 step 1 — real fs/shell command injection in a container (#252)

larstalian
and
claude
committed
feat(cyber): §6 injection contexts hold over the real shell (M1)

larstalian
and
claude
committed
feat(cyber): real-filesystem backing on the generated app (M1)

larstalian
and
claude
committed
docs(cyber): record M1 status in the §9 realization ladder

larstalian
and
claude
committed
feat(cyber): fold real-shell cmdi into the generated app, retire bespoke variant (M1)

larstalian
and
claude
committed
feat(cyber): install world-container OS tools per-vuln, not globally

larstalian
and
claude
committed
docs(cyber): point M1 remaining work at #265 (world-container hardening)

larstalian
and
claude
committed
feat(cyber): harden the world container that runs real RCE (#265)

larstalian
and
claude
committed
docs(cyber): record world-container hardening landed (#265 task 1)

larstalian
and
claude
committed
style(cyber): drop phase/task markers from code comments (.rules)

larstalian
and
claude
committed
test(cyber): cover the container helper's edge branches (.rules 100%)

larstalian
and
claude
committed
docs(cyber): describe the realization stages by issue, drop M0-M3 labels

larstalian
and
claude
committed
feat(cyber): wire Backing.CONTAINER as a real runtime (#252)

larstalian
and
claude
committed
docs(cyber): record the CONTAINER backing is wired as a runtime (#252)

larstalian
and
claude
committed
test(core): unwired-backing selection test uses SIMULATOR, not CONTAINER

larstalian
and
claude
committed
Merge origin/main (#259 leak-oracle squash) into the verification-ceiling branch

larstalian
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Cyber: self-verifying generation + real-container backing (leak oracle, LLM admission)#266

Cyber: self-verifying generation + real-container backing (leak oracle, LLM admission)#266
larstalian merged 26 commits into
mainfrom
feat/cyber-verification-ceiling

Commits on Jun 12, 2026

feat(cyber): live leak/consequence oracle (§8.3 spine) + self-verification indictment

fix(cyber): harden the leak oracle — encoded exfil + containment (closes #259 review)

chore(cyber): drop the one-off indictment experiment scaffolding

style(cyber): .rules comment cleanup

feat(cyber): M0 — dynamic admission gate for LLM-realized handlers (#260)

fix(cyber): typecheck — type the exec namespace as dict[str, Any]

test(cyber): M0 — prove the realization loop end to end

feat(examples): cyber_realize — close the M0 loop with a real LLM (codex harness)

feat(llm): ClaudeBackend — drive the claude CLI as an LLM backend

feat(cyber): M1 first brick — run a world in a real container (#252)

feat(cyber): M1 step 1 — real fs/shell command injection in a container (#252)

feat(cyber): §6 injection contexts hold over the real shell (M1)

feat(cyber): real-filesystem backing on the generated app (M1)

docs(cyber): record M1 status in the §9 realization ladder

feat(cyber): fold real-shell cmdi into the generated app, retire bespoke variant (M1)

feat(cyber): install world-container OS tools per-vuln, not globally

docs(cyber): point M1 remaining work at #265 (world-container hardening)

feat(cyber): harden the world container that runs real RCE (#265)

docs(cyber): record world-container hardening landed (#265 task 1)

style(cyber): drop phase/task markers from code comments (.rules)

test(cyber): cover the container helper's edge branches (.rules 100%)

docs(cyber): describe the realization stages by issue, drop M0-M3 labels

feat(cyber): wire Backing.CONTAINER as a real runtime (#252)

docs(cyber): record the CONTAINER backing is wired as a runtime (#252)

test(core): unwired-backing selection test uses SIMULATOR, not CONTAINER

Merge origin/main (#259 leak-oracle squash) into the verification-ceiling branch