Pulse/internal/agentexec
rcourtman 7f38a3d8bf add verify_window to agentexec command policy
CommandPolicy gains a VerifyWindow (Go duration) bounded to
[(0,], 15m] with a 2m default. NormalizeVerifyWindow and the policy
Normalize() method enforce the bounds; DefaultPolicy() populates the
default. JSON marshaling now goes through a shadow struct so the wire
form serializes as a duration string (e.g. "2m0s") rather than the raw
nanosecond integer.

Tests cover the default, the bounds (clamp to max, fall through to
default for zero/negative), the JSON roundtrip, the unmarshal-applies-
bounds contract, and rejection of unparseable duration strings.
2026-05-12 21:53:49 +01:00
..
approval_grant.go Tighten unified agent hardening proof 2026-04-23 23:37:25 +01:00
approval_grant_test.go Tighten unified agent hardening proof 2026-04-23 23:37:25 +01:00
deploy_test.go Harden agentexec token binding and disk filtering 2026-04-23 15:54:48 +01:00
export_test_helpers.go feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
policy.go add verify_window to agentexec command policy 2026-05-12 21:53:49 +01:00
policy_test.go add verify_window to agentexec command policy 2026-05-12 21:53:49 +01:00
server.go Harden unified agent runtime and installer 2026-04-23 23:04:18 +01:00
server_coverage_test.go Harden agentexec token binding and disk filtering 2026-04-23 15:54:48 +01:00
server_test.go Harden agentexec token binding and disk filtering 2026-04-23 15:54:48 +01:00
server_websocket_test.go Harden unified agent runtime and installer 2026-04-23 23:04:18 +01:00
types.go Harden unified agent runtime and installer 2026-04-23 23:04:18 +01:00
verifier_postconditions.go add verification outcome and capability postcondition substrate 2026-05-12 21:53:49 +01:00
verifier_postconditions_test.go add verification outcome and capability postcondition substrate 2026-05-12 21:53:49 +01:00