tegwick 859beed07f feat(WARDEN-WP-0020): T2 — llm-connect brain (autonomous worker now thinks) ...

llm-connect is operational (operator set OPENROUTER_API_KEY). Contract discovered from
the running service: POST /execute {"prompt":...} -> {"content":...}.

LlmConnectBrain embeds the fixed charter + the inbox message as untrusted data, calls
/execute, and parses a JSON action plan (_extract_json tolerates fences/prose), escalating
defensively on malformed/empty/transport errors. The build_plans guardrail still enforces
the allowlist + no-secret invariant on whatever the model returns — the LLM cannot widen
ops-warden's authority. `warden worker run --brain rule|llm` selects the planner.

Live-verified on the real inbox: the LLM brain planned a sensible reply+mark_read for a
secrets-engine coordination message and correctly escalated a secret-custody request as
out-of-lane — better classification than the deterministic RuleBrain.

6 new tests, 236 pass, lint clean. T3 (guarded executor) and T4 (scheduling) remain.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-29 23:10:28 +02:00

..

__init__.py

Initial Commit

2026-03-28 00:45:43 +00:00

test_access.py

feat(WARDEN-WP-0019): route secret-exec lanes to secrets-engine (route-primary, proxy fallback)

2026-06-29 17:41:49 +02:00

test_ca.py

feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir

2026-05-15 17:05:38 +02:00

test_cli.py

feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir

2026-05-15 17:05:38 +02:00

test_config.py

feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007)

2026-06-17 08:37:14 +02:00

test_doubles.py

feat(WARDEN-WP-0015): T3 conformance checker + T4 dev-tier contract doubles

2026-06-27 19:30:30 +02:00

test_flex_auth_registry.py

feat: close WP-0009/WP-0013 production integration stewardship strand

2026-06-24 12:44:32 +02:00

test_integration.py

feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir

2026-05-15 17:05:38 +02:00

test_inventory.py

feat(bootstrap): WARDEN-WP-0001 initial implementation — 42 tests passing

2026-05-15 13:27:49 +02:00

test_models.py

Initial Commit

2026-03-28 00:45:43 +00:00

test_policy.py

feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007)

2026-06-17 08:37:14 +02:00

test_posture_conformance.py

feat(WARDEN-WP-0015): T3 conformance checker + T4 dev-tier contract doubles

2026-06-27 19:30:30 +02:00

test_posture.py

feat(WARDEN-WP-0015): T2 — machine-readable posture descriptors + warden policy

2026-06-27 18:10:54 +02:00

test_principals_drift.py

feat: close WP-0009/WP-0013 production integration stewardship strand

2026-06-24 12:44:32 +02:00

test_proxy.py

feat(WARDEN-WP-0014): T4 — key-cape login orchestration lane

2026-06-27 17:31:55 +02:00

test_routing.py

feat(WARDEN-WP-0019): route secret-exec lanes to secrets-engine (route-primary, proxy fallback)

2026-06-29 17:41:49 +02:00

test_scorecard.py

feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir

2026-05-15 17:05:38 +02:00

test_tunnel_cert_readiness.py

feat(WARDEN-WP-0016): ops-bridge cert_command readiness gate + handoff

2026-06-27 19:50:28 +02:00

test_vault.py

feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir

2026-05-15 17:05:38 +02:00

test_worker.py

feat(WARDEN-WP-0020): T2 — llm-connect brain (autonomous worker now thinks)

2026-06-29 23:10:28 +02:00