Skip to content

feat: scope runtime-policy waivers by module (#932) - #1070

Merged
RonaldHensbergen merged 1 commit into
mainfrom
agents/implement-and-pr-932
Oct 31, 2026
Merged

RonaldHensbergen merged 1 commit into
mainfrom
agents/implement-and-pr-932

Conversation

@RonaldHensbergen

Copy link
Copy Markdown
Owner

Summary

  • Add optional modules to runtime-policy waivers, preserving profile-wide behavior when omitted.
  • Validate scoped IDs against declared module instances and apply waivers only to their services.
  • Include modules whose findings were suppressed in W103; document the behavior and add regression tests.

Closes #932

Validation

  • python -m unittest tests.test_runtime_policy
  • python -m unittest tests.test_validator.ProfileSchemaValidationTest
  • ruff check cli/security.py cli/validator.py tests/test_runtime_policy.py
  • npx --yes markdownlint-cli@0.49.0 docs/runtime-confinement.md CHANGELOG.md
  • Full suite: 2,054 tests passed, 23 skipped.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@sonarqubecloud

Copy link
Copy Markdown

@RonaldHensbergen
RonaldHensbergen merged commit a1298dd into main Oct 31, 2026
17 checks passed
@RonaldHensbergen
RonaldHensbergen deleted the agents/implement-and-pr-932 branch October 31, 2026 22:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Scope runtime-policy waivers to individual module instances

1 participant