Repository navigation

feat(acs): remote/pinned system prompt and rego bundle, plus top-level manifest URL loading - #3101

Merged

MohammadHaroonAbuomar merged 28 commits into

mainfrom

liamcrumm/acs-remote-prompt-and-bundle

Jun 22, 2026

Commits on Jun 17, 2026
- feat(acs): LLM annotator system prompt from file or pinned URL
  
  liamcrumm
  and
  Copilot
  committed
  c1d791d
- feat(acs): rego policy bundle from pinned URL
  
  liamcrumm
  and
  Copilot
  committed
  598326f
- Merge remote-tracking branch 'origin/main' into liamcrumm/acs-remote-prompt-and-bundle
  liamcrumm
  committed
  f4efb4f
- test(acs): sync generator packaged manifest schema with spec
  
  liamcrumm
  and
  Copilot
  committed
  7ae4328
Commits on Jun 18, 2026
- fix(acs): close prompt-source bypass via annotation binding; tighten bundle errors
  
  liamcrumm
  and
  Copilot
  committed
  8e67bce
Commits on Jun 19, 2026
- feat(core): load top-level manifest from a pinned HTTPS URL
  
  liamcrumm
  and
  Copilot
  committed
  458b56d
- feat(sdk): expose from_url across FFI, Rust, Python, and Node bindings
  
  liamcrumm
  and
  Copilot
  committed
  216dcc3
- refactor(acs): make the from_url manifest pin optional
  
  liamcrumm
  and
  Copilot
  committed
  540f05f
- docs(acs): add a real Azure AI Foundry Agents integration example
  
  liamcrumm
  and
  Copilot
  committed
  c4b101d
- ci(deps): allowlist azure-ai-agents in dependency-confusion scan
  
  liamcrumm
  and
  Copilot
  committed
  74e8d3a
- docs(acs): make foundry example retry helpers explicit-return only
  
  liamcrumm
  and
  Copilot
  committed
  acdfd0a
- fix(core): harden from_url - reject local file fields, fail closed on blank pin
  
  liamcrumm
  and
  Copilot
  committed
  c91a762
- test(acs): cover from_url at the FFI, Node, and Python binding layers
  
  liamcrumm
  and
  Copilot
  committed
  94673eb
- docs(acs): fail closed in the foundry example judge policy
  
  liamcrumm
  and
  Copilot
  committed
  97eed0c
- Merge branch 'main' into liamcrumm/acs-remote-prompt-and-bundle
  liamcrumm
  authored
  97978eb
- fix(edu-k12): correct three regex bugs in the K-12 starter pack
  
  liamcrumm
  and
  Copilot
  committed
  34bbdf1
- fix(acs): thread host limits into dispatch-time URL fetches; harden OPA temp dir permissions
  
  Imran Siddique (imran-siddique)
  and
  Claude (claude)
  committed
  99f3a9a
- fix(acs): close env-var exfil and SSRF on URL-sourced manifests
  
  liamcrumm
  and
  Copilot
  committed
  b449da2
- fix(acs): wire host limits into default dispatchers; fix fmt
  
  liamcrumm
  and
  Copilot
  committed
  ff82654
- fix(acs): import Limits unconditionally in dispatchers module
  
  liamcrumm
  and
  Copilot
  committed
  8a2e303
- fix(acs): close URL-manifest credential exfil via default-env and bindings; fix IPv6 SSRF bypass
  
  liamcrumm
  and
  Copilot
  committed
  4b77a39
- style(acs): rustfmt the new regression test and validation lines
  
  liamcrumm
  and
  Copilot
  committed
  b052d16
Commits on Jun 22, 2026
- fix(acs): propagate url_sourced to all host surfaces, drop dead dispatcher factories
  
  liamcrumm
  and
  Copilot
  committed
  2cc40f7
- fix(acs): reject remote rego bundle_url on URL-sourced manifests (host-env exfil)
  
  liamcrumm
  and
  Copilot
  committed
  59672bc
- feat(acs): revalidate redirect hops and wire host URL-fetch limits
  
  liamcrumm
  and
  Copilot
  committed
  25670c9
- docs(acs): reword doc comment to satisfy cspell on changed lines
  
  liamcrumm
  and
  Copilot
  committed
  f280e26
- Merge branch 'main' into liamcrumm/acs-remote-prompt-and-bundle
  liamcrumm
  authored
  9c8a109
- Merge branch 'main' into liamcrumm/acs-remote-prompt-and-bundle
  liamcrumm
  authored
  1fc30f8

Navigation Menu

Repository navigation

feat(acs): remote/pinned system prompt and rego bundle, plus top-level manifest URL loading - #3101

feat(acs): remote/pinned system prompt and rego bundle, plus top-level manifest URL loading#3101
MohammadHaroonAbuomar merged 28 commits into
mainfrom
liamcrumm/acs-remote-prompt-and-bundle

Commits on Jun 17, 2026

feat(acs): LLM annotator system prompt from file or pinned URL

feat(acs): rego policy bundle from pinned URL

Merge remote-tracking branch 'origin/main' into liamcrumm/acs-remote-prompt-and-bundle

test(acs): sync generator packaged manifest schema with spec

Commits on Jun 18, 2026

fix(acs): close prompt-source bypass via annotation binding; tighten bundle errors

Commits on Jun 19, 2026

feat(core): load top-level manifest from a pinned HTTPS URL

feat(sdk): expose from_url across FFI, Rust, Python, and Node bindings

refactor(acs): make the from_url manifest pin optional

docs(acs): add a real Azure AI Foundry Agents integration example

ci(deps): allowlist azure-ai-agents in dependency-confusion scan

docs(acs): make foundry example retry helpers explicit-return only

fix(core): harden from_url - reject local file fields, fail closed on blank pin

test(acs): cover from_url at the FFI, Node, and Python binding layers

docs(acs): fail closed in the foundry example judge policy

Merge branch 'main' into liamcrumm/acs-remote-prompt-and-bundle

fix(edu-k12): correct three regex bugs in the K-12 starter pack

fix(acs): thread host limits into dispatch-time URL fetches; harden OPA temp dir permissions

fix(acs): close env-var exfil and SSRF on URL-sourced manifests

fix(acs): wire host limits into default dispatchers; fix fmt

fix(acs): import Limits unconditionally in dispatchers module

fix(acs): close URL-manifest credential exfil via default-env and bindings; fix IPv6 SSRF bypass

style(acs): rustfmt the new regression test and validation lines

Commits on Jun 22, 2026

fix(acs): propagate url_sourced to all host surfaces, drop dead dispatcher factories

fix(acs): reject remote rego bundle_url on URL-sourced manifests (host-env exfil)

feat(acs): revalidate redirect hops and wire host URL-fetch limits

docs(acs): reword doc comment to satisfy cspell on changed lines

Merge branch 'main' into liamcrumm/acs-remote-prompt-and-bundle

Merge branch 'main' into liamcrumm/acs-remote-prompt-and-bundle