From de98eb0176c805d422437069822c3c3cd590adf5 Mon Sep 17 00:00:00 2001 From: Rafael Lopez Date: Mon, 12 Oct 2026 00:33:20 -0500 Subject: [PATCH 1/5] Allow bounded Ambient Guardian local execution --- .../local_execution_plane.py | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/platform/inneros_core_runtime/local_execution_plane.py b/platform/inneros_core_runtime/local_execution_plane.py index 72a49f91..023916da 100644 --- a/platform/inneros_core_runtime/local_execution_plane.py +++ b/platform/inneros_core_runtime/local_execution_plane.py @@ -382,7 +382,23 @@ "requirements.txt", "docker-compose.yml", ], - }, + },, + "Rafa-Innerchispa/inneros-ambient-guardian-amazon-2026": { + "profile": "python-tests", + "source_path": "/home/rlopez/inneros/inneros_core/workspaces/inneros-ambient-guardian-amazon-2026", + "package_roots": ["."], + "allowed_paths": [ + "docs", + "scripts", + "src", + "tests", + "README.md", + "devpost-submission.md", + "pyproject.toml", + "requirements.txt", + "Dockerfile", + ], + } } From 0d4388d079164a3fbdbd927eaa8c976431531b8b Mon Sep 17 00:00:00 2001 From: Rafael Lopez Date: Mon, 12 Oct 2026 00:33:22 -0500 Subject: [PATCH 2/5] Register Ambient Guardian runtime profile --- .../project_runtime_registry.py | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/platform/inneros_core_runtime/project_runtime_registry.py b/platform/inneros_core_runtime/project_runtime_registry.py index 1207b8f3..27743b5e 100644 --- a/platform/inneros_core_runtime/project_runtime_registry.py +++ b/platform/inneros_core_runtime/project_runtime_registry.py @@ -377,6 +377,28 @@ def migrate_existing(actor: str = "codex") -> dict[str, Any]: ("ralphiia-founderos-openai", "Rafa-Innerchispa/ralphiia-founderos-openai", None, None), ("innerspark-workforce-ai", "Rafa-Innerchispa/innerspark-workforce-ai", None, None), ("innerops-agentic-platform", "Rafa-Innerchispa/innerops-agentic-platform", None, None), + ( + "ambient-guardian-amazon-2026", + "Rafa-Innerchispa/inneros-ambient-guardian-amazon-2026", + None, + { + "policy_class": "product-app", + "allowed_commands_profile": "python-tests", + "allowed_paths": [ + "docs", + "scripts", + "src", + "tests", + "README.md", + "devpost-submission.md", + "pyproject.toml", + "requirements.txt", + "Dockerfile", + ], + "package_roots": ["."], + "write_scope": "worktree", + }, + ), ("gitlab-contributorops-agent", "Rafa-Innerchispa/gitlab-contributorops-agent", None, None), ( "infralens-ocr-amd", From fdbc38e10cd1fa23c9e06f6c2098c494570445f0 Mon Sep 17 00:00:00 2001 From: Rafael Lopez Date: Mon, 12 Oct 2026 00:33:24 -0500 Subject: [PATCH 3/5] Test Ambient Guardian bounded repo profile --- platform/tests/test_local_execution_plane.py | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/platform/tests/test_local_execution_plane.py b/platform/tests/test_local_execution_plane.py index c6123a55..a020ffc3 100644 --- a/platform/tests/test_local_execution_plane.py +++ b/platform/tests/test_local_execution_plane.py @@ -425,3 +425,17 @@ def test_python_profile_allows_bounded_gitlab_contributorops_wrapper() -> None: ] assert lep._command_allowed(command, "python-tests") is True assert lep._command_allowed(["python3", "platform/scripts/other_gitlab_script.py"], "python-tests") is False + + +def test_ambient_guardian_has_bounded_default_repo_profile() -> None: + repo = "Rafa-Innerchispa/inneros-ambient-guardian-amazon-2026" + profiles = lep._load_repo_profiles() + assert repo in profiles + conf = profiles[repo] + assert conf["profile"] == "python-tests" + assert conf["package_roots"] == ["."] + assert "src" in conf["allowed_paths"] + assert "tests" in conf["allowed_paths"] + assert "devpost-submission.md" in conf["allowed_paths"] + assert ".env" not in conf["allowed_paths"] + assert conf["source_path"].endswith("/workspaces/inneros-ambient-guardian-amazon-2026") From 4267a43900644ed949acab65f4012aface10f10d Mon Sep 17 00:00:00 2001 From: Rafael Lopez Date: Mon, 12 Oct 2026 00:33:36 -0500 Subject: [PATCH 4/5] Fix Ambient Guardian repo profile syntax --- platform/inneros_core_runtime/local_execution_plane.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/inneros_core_runtime/local_execution_plane.py b/platform/inneros_core_runtime/local_execution_plane.py index 023916da..d46a0a14 100644 --- a/platform/inneros_core_runtime/local_execution_plane.py +++ b/platform/inneros_core_runtime/local_execution_plane.py @@ -382,7 +382,7 @@ "requirements.txt", "docker-compose.yml", ], - },, + }, "Rafa-Innerchispa/inneros-ambient-guardian-amazon-2026": { "profile": "python-tests", "source_path": "/home/rlopez/inneros/inneros_core/workspaces/inneros-ambient-guardian-amazon-2026", From c45c639f937321223f5c0ff9f193f9d66268289e Mon Sep 17 00:00:00 2001 From: Rafael Lopez Date: Mon, 12 Oct 2026 00:35:57 -0500 Subject: [PATCH 5/5] Test Ambient Guardian project runtime migration --- .../tests/test_project_runtime_registry.py | 27 +++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 platform/tests/test_project_runtime_registry.py diff --git a/platform/tests/test_project_runtime_registry.py b/platform/tests/test_project_runtime_registry.py new file mode 100644 index 00000000..bf645ab1 --- /dev/null +++ b/platform/tests/test_project_runtime_registry.py @@ -0,0 +1,27 @@ +from __future__ import annotations + +from inneros_core_runtime import project_runtime_registry as prr + + +def test_migrate_existing_registers_ambient_guardian(monkeypatch, tmp_path) -> None: + monkeypatch.setenv("INNEROS_CORE_ROOT", str(tmp_path)) + + result = prr.migrate_existing(actor="pytest") + + assert result["ok"] is True + resolved = prr.resolve_project( + project_id="ambient-guardian-amazon-2026", + repo="Rafa-Innerchispa/inneros-ambient-guardian-amazon-2026", + node="primary", + ) + assert resolved["ok"] is True + project = resolved["project"] + assert project["project_id"] == "ambient-guardian-amazon-2026" + assert project["repo"] == "Rafa-Innerchispa/inneros-ambient-guardian-amazon-2026" + assert project["policy_class"] == "product-app" + assert project["write_scope"] == "worktree" + assert project["allowed_commands_profile"] == "python-tests" + assert project["package_roots"] == ["."] + assert "src" in project["allowed_paths"] + assert "tests" in project["allowed_paths"] + assert ".env" not in project["allowed_paths"]