Tech
When --cap-drop ALL Broke the Gate Socket
The dogfood run went green. The gate had governed zero calls.
That is the agent-governance-plane's entire job: run an AI coding agent inside a sandbox, route every tool call through a Unix-domain-socket gateway, and write a signed, hash-chained journal of every allow/deny. A green run that gated nothing isn't a pass. It's a governance plane governing air.
The gate that catches its own hollowness
AGP's CI dogfood doesn't just check that the harness exits 0. evidence-bundle.s...
Read the full discussion on Dev.to
This article was aggregated from Dev.to. Click to join the conversation.
View on Dev.to