Spaces:
Runtime error
Runtime error
Commit History
-
fix(npc): normalize compiled topology hosts (#103)
Lars TalianUnverified signaturebafb155 -
fix(runtime): stabilize live admission boot path (#102)
Lars TalianUnverified signature5b99233 -
Merge pull request #97 from open-cybernauts/codex/issue-94-contract-tests
Lars TalianUnverified signatureAdd explicit OpenEnv contract conformance testse5d4fbe -
Extend OpenEnv contract guardrails
Lars Taliancd25692 -
Make mutation policy weights explicit
Lars Talian228ed67 -
Merge pull request #99 from open-cybernauts/codex/issue-42-console
Lars TalianUnverified signatureWire operator console to real episode statea49b769 -
Wire console to real episode state
Lars Taliane37c7b1 -
Make builder/runtime service semantics manifest-driven
Lars Taliandabed55 -
fix(tests): patch _ensure_clean_reset_path in test_app fixture
Aaron BrownThe upstream commit added a guard that rejects direct Docker resets without ManagedSnapshotRuntime. The test fixture already patches _select_snapshot but needs to also skip this new check since tests run without a managed runtime.7d5c3bd -
test: add explicit OpenEnv contract conformance suite
Lars Talian6f64c85 -
Fix lint packaging and fail closed runtime paths (#93)
Lars TalianUnverified signature6e4e622 -
Merge remote-tracking branch 'origin/main' into codex/issue-77-20260308
Lars Talianf440eac -
Merge remote-tracking branch 'origin/main' into codex/issue-77-20260308
Lars Talian# Conflicts: # Dockerfile # README.md # src/open_range/server/runtime.pyecc152d -
Merge remote-tracking branch 'origin/main' into codex/issue-77-20260308
Lars Talian# Conflicts: # src/open_range/server/runtime.py0d7e48b -
fix(services): use Popen for daemon starts, remove fallbacks, dedup rsyslogd
Aaron Brown- Switch from sp.run+capture_output to Popen+DEVNULL for daemon starts to avoid SIGCHLD zombie reaper racing with sp.run's waitpid - Remove hardcoded fallback SnapshotSpec from _select_snapshot — raise RuntimeError when no snapshot source is available - Deduplicate daemon names in _from_topology (firewall + siem both mapped to rsyslogd, causing duplicate starts) - Add rsyslogd PID file cleanup to init commands - Update tests to provide snapshots explicitlyad5992a -
Merge pull request #92 from open-cybernauts/fix/issue-58-validator-shell-sanitization
Lars TalianUnverified signaturevalidator: sanitize shell construction for isolation probesb41adc1 -
Enforce strict live admission defaults in managed runtime (#90)
Lars TalianUnverified signatureb33db9f -
validator: harden isolation probe shell construction
Lars Talian9a22987 -
Enforce strict managed validator defaults with explicit offline opt-out
Lars Taliana72929a -
Merge pull request #87 from open-cybernauts/codex/issues-72-74-75
Lars TalianUnverified signatureFix #72 #74 #75: service-status grounding, synthetic alerts fallback, console session scopeeddb429 -
Merge pull request #89 from open-cybernauts/fix/issue-82-snapshot-admission
Lars TalianUnverified signatureruntime: enforce canonical snapshot-store semantics + persisted revalidationd39c4e0 -
Merge origin/main into codex/issue-78-80-20260308
Lars Talian5848160 -
runtime: canonicalize snapshot store semantics and revalidate persisted snapshots
Lars Taliand2dbaf9 -
Merge pull request #85 from open-cybernauts/fix/issue-80-patchability-strict
Lars TalianUnverified signaturevalidator: make patchability fail on inconclusive remediation/retest0d2d9bf -
Implement issues #72 #74 #75 env grounding and console scope
Lars Talian86c1c19 -
fix(validator): add structured exec results and strict patchability outcomes
Lars Talian595e190 -
validator: fail patchability on remediation/retest inconclusive
Lars Talianbcfb80b -
Merge remote-tracking branch 'origin/main' into codex/issue-79-81-20260308
Lars Talian# Conflicts: # tests/test_validator.py016a288 -
Harden exploitability check expectations (#84)
Lars TalianUnverified signature6f0f018 -
fix(builder): enforce bug-family contracts and decouple payload wiring
Lars Talianc75d1f7 -
fix(validator): harden evidence checks and fail unvalidated golden steps
Lars Talian72e9079 -
Ground Red/Blue rewards and finding validation
Lars Talianc51ff20 -
Merge branch 'main' of https://github.com/open-cybernauts/open-range into codex/issue-sweep-20260308
Lars Talian# Conflicts: # tests/test_builder.py0cfc06d -
fix(validator): harden mysql credential handling and prove lint packaging
Lars Taliand2809e9 -
fix(builder): enforce bug-family contracts and decouple payload wiring
Lars Talian8429075 -
fix(runner): ground manifest axis in reset inputs
Lars Talian7106e5f -
fix(validator): sanitize reward grounding command construction
Lars Talianb439619 -
fix(runtime): preserve per-host service specs and role-aware routing
Lars Talianf0faee1 -
Harden TemplateOnlyBuilder difficulty bounds
Lars Talian- Clamp malformed min/max vulns to safe bounds - Preserve at least one selected vulnerability - Add regression coverage for non-schema difficulty envelopese8df2e1 -
Enforce mixed mutation bundles and fail-fast legality checks
Lars Talian- Require structural+security mutation mix when available - Validate mutation-plan legality before mutating snapshots - Add regression tests for policy behavior and illegal plans Closes #654c52b20 -
Ground mutation-added vulns in real task paths
Lars Talianca6fc4d -
Remove hardcoded fallbacks, add snapshot-driven service lifecycle
Aaron Brown- Remove _LEGACY_STOP_DAEMONS, _start_services_legacy, _declared_service_daemons - _stop_services and _capture_service_pids derive daemons from snapshot.services - _start_snapshot_services skips when no service specs (no legacy fallback) - _resolve_target reads topology roles/zones, raises if missing - _select_snapshot raises RuntimeError when no snapshot provided - _get_pending_alerts returns [] instead of synthetic fallback - Renderer auto-populates snapshot.services via generate_service_specs - start.sh supports ServiceSpec-driven startup alongside legacy path - Tests updated: explicit snapshot in all reset() calls, 114 env tests pass - 70 new service spec tests (models, generation, lifecycle, renderer)7fedc25 -
Add episode CLI, synthetic data pipeline, NPC generalization, service manifest
Aaron Brown- Add `openrange episode` command (golden-path replay + interactive REPL) - Add synthetic data generation pipeline with teacher agents and dataset helpers - Generalize NPC actions/traffic scripts to derive targets from SnapshotSpec - Add service_manifest.py for snapshot-declared service lifecycle - Add replay_agent, dataset module, NPC reward coupling tests - Graceful container resolution when Docker is available but no containers running - Skip tests that depend on deleted snapshot fixtures - Remove scripted_agent (replaced by replay_agent)f016eb7 -
Isolate runtime-backed snapshots across resets
Lars Talian313a7b0 -
Merge pull request #52 from open-cybernauts/feat/issue50-canonical-base-graph-policy
Lars TalianUnverified signatureImplement canonical base graph and mutation policy0a3cd7a -
Tighten graph checks and trust-principal lint
Lars Talian5b3b677 -
Implement canonical base graph and mutation policy
Lars Talian80ef9e0 -
Add NPC actions, synthetic data pipeline, CLI enhancements
Aaron BrownAgent-generated supporting changes from architecture review: - NPC action system (actions.py) for structured NPC behaviors - Synthetic data generation pipeline (training/synthetic.py) - CLI improvements and NPC traffic script updates - NPC agent loop enhancements for topology-driven operationfb68239 -
Add live admission for rendered child snapshots
Lars Talian307d729 -
Merge upstream changes, resolve conflicts
Aaron Brown- Take local validator profile system over upstream simplified version - 698/700 tests passing (2 pre-existing upstream lineage metadata failures)eaa2876