feat(bridge): in-proc ReflexMonitor tool_guard (TCB prototype)#80
Merged
Conversation
3 tasks
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 62de061c7f
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
HyperdustLabs
force-pushed
the
feat/v0.3-reflex-policy-export
branch
from
791da54 to
6677eee
Compare
HyperdustLabs
force-pushed
the
feat/v0.3-bridge-in-proc-tcb
branch
from
62de061 to
add146d
Compare
Add ReflexMonitor, policy sync from reflex.policies.export, and fail-closed before_tool_call path with optional daemon audit. Co-authored-by: Cursor <cursoragent@cursor.com>
HyperdustLabs
force-pushed
the
feat/v0.3-bridge-in-proc-tcb
branch
from
add146d to
7aab9ca
Compare
HyperdustLabs
pushed a commit
that referenced
this pull request
May 24, 2026
Co-authored-by: Cursor <cursoragent@cursor.com>
HyperdustLabs
pushed a commit
that referenced
this pull request
May 24, 2026
Co-authored-by: Cursor <cursoragent@cursor.com>
HyperdustLabs
added a commit
that referenced
this pull request
May 24, 2026
* feat(runtime,bridge): r_t JSONL emission and warm-path plasticity reweight Add credit.r_t.* RPCs, PlasticityEngine reweight on heartbeat/append, bridge r_t emit on tool outcomes, and RtPlasticityWorker maintenance. Co-authored-by: Cursor <cursoragent@cursor.com> * chore: drop unrelated sync-bai-llm-keys script from PR Co-authored-by: Cursor <cursoragent@cursor.com> * fix(runtime): lock r_t consume and break credit package import cycle Serialize read_new + reweight under an RLock for JSON-RPC vs heartbeat. Stop re-exporting RtPlasticityService from credit/__init__ to avoid r_t_recorder circular import on fresh processes. Co-authored-by: Cursor <cursoragent@cursor.com> * chore: fix ruff lint on r_t branch (stacked on #80) Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: moss <moss@mosss-MacBook-Pro-2.local> Co-authored-by: Cursor <cursoragent@cursor.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
ReflexMonitor, portable policy spec, andreflex-tool-guardfail-closed path onbefore_tool_call.reflex.policies.export; optional audit joinpoint.inProcReflexToolGuard,reflexSyncFromDaemon,reflexAuditToDaemon.Test plan
cd integrations/openclaw-opencoat-bridge && npm testin-proc ReflexMonitor tool_guard policies: …rm -rfblocked in-proc without daemon RPC on guard pathStack: 3/4 (base: #79).
Made with Cursor