feat: HTTP-level ACL for AI agent sandboxing#7

Merged

congwang-mk merged 26 commits intomainfrom

feat/http-acl

Apr 5, 2026

Commits on Apr 5, 2026

feat(policy): add HttpRule, glob_match, and http_acl_check for HTTP-level ACL

congwang-mk
and
claude
committed
fix: propagate HTTP rule parse errors and improve function naming

congwang-mk
and
claude
committed
Add hudsucker dependency to sandlock-core

congwang-mk
and
claude
committed
feat(http-acl): implement HttpAclProxy with hudsucker MITM proxy

congwang-mk
and
claude
committed
feat(http-acl): wire proxy into SupervisorState and redirect connect()

congwang-mk
and
claude
committed
feat: wire HTTP ACL proxy startup into Sandbox::do_spawn()

congwang-mk
and
claude
committed
feat: Add --http-allow and --http-deny CLI arguments

congwang-mk
and
claude
committed
feat: Add FFI bindings for HTTP ACL rules

congwang-mk
and
claude
committed
feat(python): Add HTTP ACL support to Policy dataclass and FFI bindings

congwang-mk
and
claude
committed
test: add integration tests for HTTP ACL proxy

congwang-mk
and
claude
committed
feat: Add HTTP ACL support to profiles

congwang-mk
and
claude
committed
test: add 7 HTTP ACL integration tests for method filtering, HTTPS MITM, wildcards, and more

congwang-mk
and
claude
committed
perf: cap tokio runtime to 2 worker threads

congwang-mk
and
claude
committed
refactor: user-provided CA cert for HTTPS MITM instead of auto-generation

congwang-mk
and
claude
committed
fix: defer HTTP rule parsing to build() and validate https_ca/https_key pairing

congwang-mk
and
claude
committed
fix: lazy dummy CA and graceful proxy shutdown for HTTP ACL

congwang-mk
and
claude
committed
fix: remove redundant shutdown() method, Drop impl suffices

congwang-mk
and
claude
committed
fix(security): prevent Host header spoofing in HTTP ACL proxy

congwang-mk
and
claude
committed
perf: add DNS cache to Host header verification in HTTP ACL proxy

congwang-mk
and
claude
committed
feat: add --http-port for configurable HTTP ACL port interception

congwang-mk
and
claude
committed
fix: prefix unused variable with underscore in test_policy_fn

congwang-mk
and
claude
committed
fix: MCP deny-by-default now blocks all TCP via Landlock

congwang-mk
and
claude
committed
fix: IPv6 support, orig_dest memory leak, and TOCTOU race in HTTP ACL

congwang-mk
and
claude
committed
fix: replace httpbin.org tests with local servers, fix proxy forwarding

congwang-mk
and
claude
committed
fix(security): normalize HTTP paths before ACL matching

congwang-mk
and
claude
committed
docs: add HTTP ACL documentation to READMEs

congwang-mk
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: HTTP-level ACL for AI agent sandboxing#7

feat: HTTP-level ACL for AI agent sandboxing#7
congwang-mk merged 26 commits intomainfrom
feat/http-acl

Commits on Apr 5, 2026

feat(policy): add HttpRule, glob_match, and http_acl_check for HTTP-level ACL

fix: propagate HTTP rule parse errors and improve function naming

Add hudsucker dependency to sandlock-core

feat(http-acl): implement HttpAclProxy with hudsucker MITM proxy

feat(http-acl): wire proxy into SupervisorState and redirect connect()

feat: wire HTTP ACL proxy startup into Sandbox::do_spawn()

feat: Add --http-allow and --http-deny CLI arguments

feat: Add FFI bindings for HTTP ACL rules

feat(python): Add HTTP ACL support to Policy dataclass and FFI bindings

test: add integration tests for HTTP ACL proxy

feat: Add HTTP ACL support to profiles

test: add 7 HTTP ACL integration tests for method filtering, HTTPS MITM, wildcards, and more

perf: cap tokio runtime to 2 worker threads

refactor: user-provided CA cert for HTTPS MITM instead of auto-generation

fix: defer HTTP rule parsing to build() and validate https_ca/https_key pairing

fix: lazy dummy CA and graceful proxy shutdown for HTTP ACL

fix: remove redundant shutdown() method, Drop impl suffices

fix(security): prevent Host header spoofing in HTTP ACL proxy

perf: add DNS cache to Host header verification in HTTP ACL proxy

feat: add --http-port for configurable HTTP ACL port interception

fix: prefix unused variable with underscore in test_policy_fn

fix: MCP deny-by-default now blocks all TCP via Landlock

fix: IPv6 support, orig_dest memory leak, and TOCTOU race in HTTP ACL

fix: replace httpbin.org tests with local servers, fix proxy forwarding

fix(security): normalize HTTP paths before ACL matching

docs: add HTTP ACL documentation to READMEs