feat: egress schema and constitution checks at high bind (#78) - #87
Merged
Merged
Conversation
Add variables.schema_refs and schema_check constraint rules for JSON Schema validation on tool.call args and tool.result payloads. Spectrum high/full auto-wires refs unless schema_enforcement is false. Audit finding SCHEMA_VIOLATION, conformance schema check, merged_profile_rules helper, tests, docs, and host stress sim scenario.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds JSON Schema validation at egress for
tool.callargs andtool.resultpayloads (#78).variables.schema_refs— named schema specs per tool (on:call|result|both)schema_check— explicit constraint rule type (works at any spectrum level)spectrum.schema_enforcement: falseSCHEMA_VIOLATION; conformanceschemacheck on closemerged_profile_rules()— shared merge path for sessions andaura agent showjsonschema>=4.21Type
Fixes #78
Checklist
Fixes #78)pytestpasses (238 tests)black aura tests— cleanflake8 aura tests— cleanCHANGELOG.mdupdatedTest plan
tests/test_schema_checks.py— deny malformed / pass valid, mid vs high auto-wire, opt-out, tool.result, egress, audit report, conformance, CLI showscripts/aura_host_stress_sim.py—schema_high_bind(34/34)scripts/aura_capability_stress_sim.py— regression (16/16)