feat: initial scaffold and core implementation of agent-kernel#1

Merged

dgenio merged 19 commits intomainfrom

copilot/init-agent-kernel-implementation

Mar 4, 2026

Commits on Mar 2, 2026

Commits on Mar 4, 2026

fix: replace bare ValueError with CapabilityAlreadyRegistered in registry
dgenio
committed
fix: wire default_timeout as fallback in HTTPDriver.execute()
dgenio
committed
fix: prevent IndexError on empty rows in HandleStore.expand()
dgenio
committed
fix: include full token and audit_id in CapabilityGrant
dgenio
committed
fix: validate max_rows constraint and raise PolicyDenied on invalid input
dgenio
committed
chore: remove unused _deep_copy_truncated and import copy
dgenio
committed
fix: avoid json.loads on truncated JSON in raw mode transform
dgenio
committed
fix: record effective response_mode in ActionTrace instead of requested
dgenio
committed
docs: fix Kernel docstring example to include principal arg
dgenio
committed
fix: require justification for DESTRUCTIVE operations
dgenio
committed
fix: remove duplicate Budgets class, consolidate to firewall.budgets
dgenio
committed
fix: tighten _PHONE_RE to require phone-like structure, add regex tests
dgenio
committed
fix: bound HandleStore with max_entries cap and periodic auto-eviction
dgenio
committed
refactor: deduplicate get_token via grant_capability, bring kernel.py under 300 lines
dgenio
committed
fix: add threading.Lock to _get_secret, fix test_dev_secret state leakage
dgenio
committed
style: fix ruff format for get_token return statement
dgenio
committed