Skip to content

Add NVIDIA OpenShell/Sentry EABC audit workspace - #5

Open
omwei-org wants to merge 107 commits into
mainfrom
audit/openshell-sentry-2026-10
Open

omwei-org wants to merge 107 commits into
mainfrom
audit/openshell-sentry-2026-10

Conversation

@omwei-org

@omwei-org omwei-org commented Oct 17, 2026 •

Copy link
Copy Markdown
Owner

Adds an evidence-based audit workspace for evaluating NVIDIA OpenShell and NVIDIA Sentry against the EABC execution-boundary model. This audit is separate from the AgenTrust/cMCP interoperability experiment.

Included:

  • Findings register with evidence classes, pinned source permalinks and EABC criterion mappings
  • Runtime test matrix with explicit NOT TESTED status
  • Original OpenShell baseline pinned to a4c848adbddd0b4732fd70ddcf8a563a5b1e9317
  • Separate source-drift review at b58e24c9dabd6d4bcf2b7186592d3ad50646541b, including the outer-fence assurance-contract change, Docker/Podman actual-state checks, VM QEMU -nic none / libkrun vsock source counter-evidence, and open delegated-backend assurance questions

Important: this remains a source review and test plan, not a claim that runtime tests have passed. No runtime tests were executed. The audit does not claim a confirmed OpenShell vulnerability or EABC conformance. Standalone Sentry assurance and OpenShell + Sentry composition remain open pending exact version/configuration and effect-path evidence.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant