feat: analyze bundled permission grants - #429

Merged

rng1995 merged 54 commits into

NVIDIA:mainfrom

chrisknvidia:feat/christopherk/issue-399-permission-surface

Aug 28, 2026

Commits on Aug 21, 2026

chore: start issue 399 implementation
chrisknvidia
committed
b18bd6c
Merge branch 'main' into feat/christopherk/issue-399-hook-surface
rng1995
authored
1932978

Commits on Aug 22, 2026

Merge remote-tracking branch 'origin/main' into feat/christopherk/issue-399-hook-surface
chrisknvidia
committed
1270d94
feat: analyze bundled hook execution surfaces
chrisknvidia
committed
406588d
fix: normalize mapped loopback semantics
chrisknvidia
committed
8cf3376

Commits on Aug 24, 2026

fix: harden bundled hook flow analysis
chrisknvidia
committed
b6803aa
Merge origin/main into feat/christopherk/issue-399-hook-surface
chrisknvidia
committed
5f66e0e
docs: design bundled permission grant analysis
chrisknvidia
committed
864a2a8
docs: correct pinned permission verification
chrisknvidia
committed
466188b
feat: model bundled permission modes
chrisknvidia
committed
f4f1b98
fix: hash all JSON permission identities safely
chrisknvidia
committed
27e74f6
docs: align permission grammar with pinned runtime
chrisknvidia
committed
6986746
feat: classify bundled permission grants
chrisknvidia
committed
fbef278
fix: canonicalize permission rule coverage
chrisknvidia
committed
4365df4
docs: bound permission matching and path grammar
chrisknvidia
committed
287555f
fix: bound permission matching and path classification
chrisknvidia
committed
923d9a2
docs: define Windows device path handling
chrisknvidia
committed
f30f6c6
fix: classify reserved Windows directories
chrisknvidia
committed
159de38
docs: pin additional directory normalization
chrisknvidia
committed
b99e90a
fix: normalize additional directory paths
chrisknvidia
committed
3c11ff3

Commits on Aug 25, 2026

fix: collapse extended Windows path segments
chrisknvidia
committed
34a1141
feat: emit safe bundled permission findings
chrisknvidia
committed
3c2056c
fix: reject non-string permission digests
chrisknvidia
committed
220385a
feat: analyze permissions in bundled settings
chrisknvidia
committed
d5011da
fix: preserve permission source integrity
chrisknvidia
committed
d2df0d6
fix: disambiguate archive settings namespaces
chrisknvidia
committed
19f22d4
fix: anchor missing archive settings references
chrisknvidia
committed
6072265
docs: harden permission source provenance
chrisknvidia
committed
298f2a6
fix: bound settings location recovery
chrisknvidia
committed
e65f92f
fix: bind permissions to typed provenance
chrisknvidia
committed
1f6ee27
fix: validate nested document provenance
chrisknvidia
committed
f82a726
feat: integrate BH3 reporting and risk policy
chrisknvidia
committed
8015f4f
docs: document bundled permission analysis
chrisknvidia
committed
89e9e65
test: cover bundled permissions end to end
chrisknvidia
committed
0d52307
docs: correct permission trust claims
chrisknvidia
committed
53d9e09
docs: avoid exhaustive pattern claim
chrisknvidia
committed
0527b19
test: harden bundled permission e2e oracles
chrisknvidia
committed
86826a3
test: reject normalized permission canaries
chrisknvidia
committed
6dce677
docs: remove internal superpowers artifacts
chrisknvidia
committed
a71fd69
docs: remove internal superpowers artifacts
chrisknvidia
committed
49b0d58

Commits on Aug 26, 2026

Merge main into feat/christopherk/issue-399-hook-surface
rng1995
committed
eb9a87b
Merge main into feat/christopherk/issue-399-permission-surface
rng1995
committed
2a8f724
Merge branch 'main' into feat/christopherk/issue-399-hook-surface
rng1995
authored
12769cc
Merge branch 'main' into feat/christopherk/issue-399-permission-surface
rng1995
authored
7bd0820
feat: replace hook analysis with minimal surface model
chrisknvidia
committed
dba86f6
fix: reject dynamic hook destinations
chrisknvidia
committed
1f97719
fix: preserve dynamic HTTP hook inventory
chrisknvidia
committed
a12b29c
fix: tighten bundled hook proof validation
chrisknvidia
committed
06a1ab3
fix: validate allow-rule wildcard scope
chrisknvidia
committed
a2a2768
feat: replace permission analysis with minimal surface model
chrisknvidia
committed
d2fcb8b

Commits on Aug 27, 2026

fix: align bundled hook activation semantics
chrisknvidia
committed
9759c6f
fix: clarify permission activation evidence
chrisknvidia
committed
b09e650
Merge PR #404 hook activation fixes
chrisknvidia
committed
bfef00f

Commits on Aug 28, 2026

Merge branch 'main' into feat/christopherk/issue-399-permission-surface
rng1995
authored
54730d5