luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add audited response apply rehearsal

Browse source
This commit is contained in:
Luna 2026-07-09 05:56:25 -07:00
parent 51d52b5229
commit 0b010df514
No known key found for this signature in database
11 changed files with 198 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/SPECIFICATION.md
View file

@ -109,7 +109,9 @@ When a fresh alert survives cooldown, Sentinel writes:
CLI-generated response plans are durable artifacts: `respond plan` writes the
reviewed dry-run plan under `response-plans/` and appends a JSONL
`response-audit.log` record. Dashboard/API previews remain read-only and do not
create artifacts.
create artifacts. `respond apply <plan-ref> --dry-run` reloads a saved plan and
appends an apply-rehearsal audit record with `executed: false`; it does not run
commands.
Current IPS scope is explicit prevention workflow, not transparent inline
enforcement. Sentinel can recommend evidence preservation, process