Repository navigation

feat(docker): add network: llm_only with a separate grading allowlist - #239

Merged

bai-uipath merged 29 commits into

mainfrom

bai/network-policy

Oct 30, 2026

Merged

feat(docker): add network: llm_only with a separate grading allowlist#239
bai-uipath merged 29 commits into
mainfrom
bai/network-policy

Commits on Oct 1, 2026
- feat(docker): 1/5 — add network: llm_only and egress_allowlist to DockerDriverConfig
  
  CarlesUIPath
  and
  claude
  committed
  af51222
- feat(docker): 2/5 — add the stdlib-only egress proxy for network: llm_only
  
  CarlesUIPath
  and
  claude
  committed
  27a62c4
- feat(docker): 3/5 — derive the llm_only egress allowlist on the host
  
  CarlesUIPath
  and
  claude
  committed
  01f61b4
- feat(docker): 4/5 — run llm_only containers behind a per-task egress sidecar
  
  CarlesUIPath
  and
  claude
  committed
  ef3e112
- docs(docker): 5/5 — document network: llm_only and add a negative egress task
  
  CarlesUIPath
  and
  claude
  committed
  d8c989d
- docs(tasks): list docker_egress_llm_only among the smoke members
  
  CarlesUIPath
  and
  claude
  committed
  781d89c
- fix(docker): code review fixes for network: llm_only
  
  CarlesUIPath
  and
  claude
  committed
  23c16dc
- fix(docker): allow only the model hosts each llm_only task uses
  
  CarlesUIPath
  and
  claude
  committed
  b9c2457
- fix(docker): code review fixes for network: llm_only
  
  CarlesUIPath
  and
  claude
  committed
  79a3d33
Commits on Oct 2, 2026
- test(tasks): add a thorough egress probe task for network: llm_only
  
  CarlesUIPath
  and
  claude
  committed
  d24918b
- test(tasks): probe the LiteLLM model host in the egress task
  
  CarlesUIPath
  and
  claude
  committed
  cc0cf72
- fix(deps): bump urllib3 to 2.8.0 and virtualenv to 21.7.13 for pip-audit
  
  CarlesUIPath
  and
  claude
  committed
  ca78e6c
- test(docker): resolve the CodeQL alerts in the egress tests
  
  CarlesUIPath
  and
  claude
  committed
  2aae6d7
- test(docker): make the bad-region setup-error test independent of local credentials
  
  CarlesUIPath
  and
  claude
  committed
  b76722d
- test(docker): consolidate the egress tests
  
  CarlesUIPath
  and
  claude
  committed
  26fe491
- docs(docker): record the OpenCode and Pi llm_only runs
  
  CarlesUIPath
  and
  claude
  committed
  9dd135d
- test(docker): keep side effects out of asserts in the egress runner tests
  
  CarlesUIPath
  and
  claude
  committed
  93418f0
- chore(docker): remove redundant parts of the llm_only change
  
  CarlesUIPath
  and
  claude
  committed
  ff443ac
Commits on Oct 26, 2026
- chore: merge main into the llm_only egress branch
  bai-uipath
  committed
  8a611e9
- feat(docker): give grading its own egress allowlist under network: llm_only
  
  bai-uipath
  and
  claude
  committed
  48887eb
- fix(deps): bump filelock to 4.2.4 for pip-audit
  
  bai-uipath
  and
  claude
  committed
  c07a178
- fix(deps): bump virtualenv to 21.14.13 for osv-scanner
  
  bai-uipath
  and
  claude
  committed
  c0e4c62
- fix(docker): reclaim leaked egress networks and report hosts refused during grading
  
  bai-uipath
  and
  claude
  committed
  25506df
- fix(docker): make the egress probe's model-host check work on every harness
  
  bai-uipath
  and
  claude
  committed
  156dcba
Commits on Oct 29, 2026
- chore: merge main into the llm_only egress branch
  
  bai-uipath
  and
  claude
  committed
  0c426b4
- fix(docker): accept only bridge for grading_network and refuse a stray grading allowlist
  
  bai-uipath
  and
  claude
  committed
  8ffafd7
- fix(docker): keep the row status on refused grading hosts and harden the grading handshake
  
  bai-uipath
  and
  claude
  committed
  4b73cdd
- fix(docker): let a re-grade replace the recorded grading denials
  
  bai-uipath
  and
  claude
  committed
  1063769
- fix(docker): suppress the grading watcher's own cancel without an empty except
  
  bai-uipath
  and
  claude
  committed
  d64ff24

Commits

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 26, 2026

Commits on Oct 29, 2026