[doc] Policy: state load-gate scope and the SetFS exception#26
Conversation
Make the security model honest about its boundaries (independent review, 2026-06-20): the load gate now covers every named-module path - builtin, custom, dynamic, and script modules (AddModuleScript, by their .star name). It does NOT gate SetFS: a host-mounted fs.FS is a raw filesystem grant with no module-name registry to match, so a default-deny Box that also calls SetFS exposes that filesystem's contents. Documented so hosts curate the mounted FS (or omit SetFS) under a restrictive policy.
Up to standards ✅🟢 Issues
|
| Metric | Results |
|---|---|
| Complexity | 0 |
| Duplication | 0 |
🟢 Coverage ∅ diff coverage · +0.00% coverage variation
Metric Results Coverage variation ✅ +0.00% coverage variation (-1.00%) Diff coverage ✅ ∅ diff coverage Coverage variation details
Coverable lines Covered lines Coverage Common ancestor commit (9c74acf) 1154 1145 99.22% Head commit (a32d5fe) 1154 (+0) 1145 (+0) 99.22% (+0.00%) Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch:
<coverage of head commit> - <coverage of common ancestor commit>Diff coverage details
Coverable lines Covered lines Diff coverage Pull request (#26) 0 0 ∅ (not applicable) Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified:
<covered lines added or modified>/<coverable lines added or modified> * 100%
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #26 +/- ##
=======================================
Coverage 98.95% 98.95%
=======================================
Files 12 12
Lines 862 862
=======================================
Hits 853 853
Misses 5 5
Partials 4 4 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
1 participant
Doc-only. Makes the A4 security model honest about its boundaries (independent review 2026-06-20).
The
Policyload gate now covers every named-module path a script canload(): builtin, custom (AddModule*), dynamic, and script modules (AddModuleScript, matched by their registered.starname — fixed in #24).It does not gate
SetFS: a host-mountedfs.FSis a raw, deliberate filesystem grant with no module-name registry to match against, so a default-deny Box that also callsSetFSexposes whatever that filesystem contains. The doc now tells hosts to curate the mounted FS (or omitSetFS) under a restrictive policy — closing the "is there another bypass?" question with an explicit, documented scope rather than a silent gap.