Search results

Wrap untrusted-input daemon writes through OWASP Agent Memory Guard

Status: Open.

#40 In markmhendrickson/ateles;

· markmhendrickson opened on May 27, 2026

Wire AgentThreatBench evals into a daily regression suite for the swarm

Status: Open.

#39 In markmhendrickson/ateles;

· markmhendrickson opened on May 27, 2026

Dual-metric scoring on execution_policy: utility + safety

Status: Open.

#38 In markmhendrickson/ateles;

· markmhendrickson opened on May 27, 2026

Retrieve-scoped capability filters (read-side parameter constraints in R3 vocabularies)

Status: Open.

#35 In markmhendrickson/ateles;

· markmhendrickson opened on May 26, 2026

Tier-conditional capabilities (hardware vs software keys)

Status: Open.

#33 In markmhendrickson/ateles;

· markmhendrickson opened on May 26, 2026

Class-grouping for daemon consent (companion to upstream AAuth #22)

Status: Open.

#32 In markmhendrickson/ateles;

· markmhendrickson opened on May 26, 2026

Model Onychomys→daemon as act-chain sub-agents (depth-1, parent-mediated)

Status: Open.

#31 In markmhendrickson/ateles;

· markmhendrickson opened on May 26, 2026

Implement R3 r3_conditional support in Neotoma's AAuth verifier

Status: Open.

#30 In markmhendrickson/ateles;

· markmhendrickson opened on May 26, 2026

Generalize tool-level authorization: extend agent_grant to MCP tool calls

Status: Open.

#26 In markmhendrickson/ateles;

· markmhendrickson opened on May 25, 2026

ateles#19 part 6 (bonus): transitive attribution via derived_from on LLM-summarised entities

Status: Open.

#25 In markmhendrickson/ateles;

· markmhendrickson opened on May 25, 2026

ateles#19 part 5: populate inputs_consulted from retrieval_events at artifact emit

Status: Open.

#24 In markmhendrickson/ateles;

· markmhendrickson opened on May 25, 2026

ateles#19 part 4: auto-stamp retrieval_event from mcpsrv_neotoma

Status: Open.

#23 In markmhendrickson/ateles;

· markmhendrickson opened on May 25, 2026