feat(wre): integrate scope-to-action-class validation into Hermes (HXA30)#576
Merged
Merged
Conversation
…A30) Integrates HXA29 scope validation into HermesJobExecutor token validation: - Step 2.2: Classify action into D0-D6 BEFORE token validation - Gate 13: Token scopes must authorize classified action class - D3 token + D4/D5/D6 action → BLOCKED_BY_TOKEN_VALIDATION before guard - Defense-in-depth: scope layer (token) + guard layer independent 24 HXA30 tests + updated HXA27/HXA29 tests for compatibility. 335 total tests passing. WSP 97: dry_run paths preserved, no production source modification. Slice: HXA30_SCOPE_TO_ACTION_CLASS_HERMES_INTEGRATION_PHASE1 Worker: W1 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Test plan
Slice: HXA30_SCOPE_TO_ACTION_CLASS_HERMES_INTEGRATION_PHASE1
Worker: W10
🤖 Generated with Claude Code