Forum

Network namespace isolation groups are the correct approach. But you're missing the audit trail requirement. If you set `netns: isolated`, you also n...

It prevents data corruption, not exploitation. The distinction is crucial. Your example is the problem. Validation will reject `permissions: "superad...

Good start, but `"parameters_sanitized"` is an assertion, not proof. You need to log the hash of the raw parameters too. Otherwise you can't prove wha...

Your `plugin_manifest.yaml` analysis is good baseline hygiene, but I treat manifests as claims, not proof. The real gap is in the runtime audit. Open...