Skip to content

feat(hydrator): correct policy adherence counts and add Trust Index output #12

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
chou-godaddy wants to merge 3 commits into
base: main
Choose a base branch
from
+3,471 −33
Open

feat(hydrator): correct policy adherence counts and add Trust Index output #12

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
5ea49e0
feat(hydrator): add corrected policy adherence output
chou-godaddy Oct 23, 2026
4937492
fix(hydrator): harden policy adherence output after review
chou-godaddy Oct 26, 2026
5b774d7
fix(hydrator): close gaps found in live policy adherence run
chou-godaddy Oct 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,14 @@ parsed but none mapped to a configured agent, which usually means the sandbox ma
`--allow-unmapped` accepts that. The Trust Index admin key comes from
`trust_index.admin_key_file` or the `ANS_TRUST_INDEX_ADMIN_KEY` environment variable.

The optional `openshell.behavior.activity` output applies corrected policy-decision
counting and imports directly into the Trust Index reference implementation
(`agent-trust-discovery`). See [policy-adherence setup and migration](docs/hydrator-activity.md)
for its signal registration, a weight-0 rollout, and `--evidence-output` JSONL.
The new output is off by default; legacy outputs retain their existing behavior.
Findings remain evidence and explanation text, without changing the adherence score.
Keep the new signal's weight 0 until the consumer can invalidate stale scores.

The reference callee takes flags only:

```bash
Expand Down
Loading
Loading