Skip to content

fix: require Governance for firewall allow/deny lists - #26

Merged
coreybutler merged 1 commit into
mainfrom
fix/gate-machine-policy-governance
Oct 31, 2026
Merged

coreybutler merged 1 commit into
mainfrom
fix/gate-machine-policy-governance

Conversation

@coreybutler

Copy link
Copy Markdown
Contributor

Summary

  • nvm firewall allow|deny version|module requires Governance (AllowsMachinePolicy), not merely a Certified Build.

Test plan

  • Certified without Governance: allow/deny version fails with clear error
  • With Governance: allow/deny still works elevated

Version and approved-module allow/deny write Policies values that
are inert without Governance. Fail closed with a clear error.

Signed-off-by: Corey Butler <770982+coreybutler@users.noreply.github.com>
@coreybutler
coreybutler merged commit e5a54fc into main Oct 31, 2026
5 of 6 checks passed
@coreybutler
coreybutler deleted the fix/gate-machine-policy-governance branch October 31, 2026 02:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant