UniqueSoft/APAW
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

[GNS-2] Phase 6: Security Hardening v2 (Depth & Budget Governance) #105

New Issue
Closed
opened 2026-05-08 19:22:48 +00:00 by NW · 0 comments
NW commented 2026-05-08 19:22:48 +00:00
Owner
Copy Link

Goal

Implement security rules for controlled cascade: depth limits, budget governance, circuit breakers.

Changes

  1. Update .kilo/rules/subagent-security.md with GNS-2 rules
  2. Budget governance: agents check before spawning
  3. Depth governance: cascade labels as hard limits
  4. Circuit breaker: is_locked on violation

Deliverables

  • Updated subagent-security.md
  • Budget enforcement in agent protocol
  • Depth enforcement in agent protocol
  • Circuit breaker logic
  • Security audit of new permissions

Budget

  • Estimated tokens: 4000
## Goal Implement security rules for controlled cascade: depth limits, budget governance, circuit breakers. ## Changes 1. Update .kilo/rules/subagent-security.md with GNS-2 rules 2. Budget governance: agents check before spawning 3. Depth governance: cascade labels as hard limits 4. Circuit breaker: is_locked on violation ## Deliverables - [ ] Updated subagent-security.md - [ ] Budget enforcement in agent protocol - [ ] Depth enforcement in agent protocol - [ ] Circuit breaker logic - [ ] Security audit of new permissions ## Budget - Estimated tokens: 4000
NW added this to the [Evolution] GNS-2 Gitea-Nervous-System v2.0 milestone 2026-05-08 19:22:48 +00:00
NW added the type::enhancement label 2026-05-08 19:22:48 +00:00
NW closed this issue 2026-05-08 20:26:30 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
agent::agent-architect
Owned by agent-architect
 agent::capability-analyst
Owned by capability-analyst
 agent::code-skeptic
Owned by code-skeptic
 agent::evaluator
Owned by evaluator
 agent::history-miner
Owned by history-miner
 agent::lead-developer
Owned by lead-developer
 agent::orchestrator
Owned by orchestrator
 agent::sdet-engineer
Owned by sdet-engineer
 agent::system-analyst
Owned by system-analyst
 agent::the-fixer
Owned by the-fixer
 budget::exhausted
Token budget exhausted
 budget::sufficient
Token budget sufficient
 budget::warning
Token budget low
 cascade::depth-0
No subagent calls
 cascade::depth-1
1-level subagent calls
 cascade::depth-2
2-level subagent calls
 cascade::depth-exceeded
Depth limit exceeded
 cascade::depth-n
Unlimited subagent calls
 evolution::model-change
Model change evolution
 evolution::new-agent
New agent evolution
 evolution::new-skill
New skill evolution
 evolution::new-workflow
New workflow evolution
 evolution::prompt-opt
Prompt optimization evolution
 memory::checkpoint
Checkpoint stored
 memory::fresh
Checkpoint fresh
 memory::recoverable
Checkpoint recoverable
 memory::stale
Checkpoint stale
 permission::evolve-system
Can evolve system
 permission::read-only
Read-only access
 permission::violation
Security violation
 permission::write-code
Can write code
 permission::write-config
Can write config
 phase::awaiting-review
Agent awaits review
 phase::drafting-spec
Agent is drafting specification
 phase::executing
Agent is executing task
 phase::gathering-evidence
Agent is gathering data
 phase::refining-prompt
Agent is refining prompts
 phase::verifying
Agent is verifying results
 priority::critical
Critical priority
 priority::high
High priority
 priority::low
Low priority
 priority::medium
Medium priority
 quality::blocked
Blocked by quality
 quality::fail
Quality check failed
 quality::needs-fix
Needs fixes
 quality::pass
Quality check passed
 size::l
Large (4-8 hours)
 size::m
Medium (2-4 hours)
 size::s
Small (1-2 hours)
 size::xl
Extra large (>8 hours)
 size::xs
Extra small (<1 hour)
 status::blocked
Blocked
 status::cancelled
Cancelled
 status::done
Completed
 status::in-progress
Work in progress
 status::new
New issue, not started
 status::planned
Planned for sprint
 status::review
Under review
 status::testing
In testing
 type::bug
Something is broken
 type::chore
Maintenance task
 type::documentation
Documentation
 type::enhancement
Improvement
 type::feature
New feature
 type::refactor
Code refactoring
 type::test
Testing
No Label type::enhancement
Milestone
No items
No Milestone [Evolution] GNS-2 Gitea-Nervous-System v2.0
Projects
Clear projects
No project
Assignees
Clear assignees
NW olilovedani
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: UniqueSoft/APAW#105
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?