feat(mxc): add UI policy controls and provider credential management - #3296

Open

araza008 wants to merge 39 commits into

NVIDIA:mainfrom

araza008:akberr/credential-manager

Commits on Sep 11, 2026

Implement Windows host proxy integration and update dependencies for OpenShell
araza008
committed
cf64448
Update README and gateway config to clarify egress proxy address handling and allocation
araza008
committed
0d08fd1
Refactor ProxyIdentityMode to return Result for static_binary and add tests for binary path and SHA256 hash
araza008
committed
4acc6fd
Enhance platform_hosts_path for Windows to use SystemRoot and improve error handling for hosts file reading
araza008
committed
6111002
Refactor FileFingerprint to use Option for mtime and ctime, simplifying metadata handling
araza008
committed
c472b2c
Add conditional compilation for Windows host module
araza008
committed
933a475
add unit tests for OPA policy evaluation and identity handling
araza008
committed
346d77e
remove openshell-supervisor-network from unsupported driver package test exclusion list
araza008
committed
992a6a2
feat(mxc): enable host proxy TLS state generation
araza008
committed
456f6af
fix(docs): remove outdated notes on governed egress from docs
araza008
committed
b86da64
fix(tests): update TLS environment variable paths to use temporary directory
araza008
committed
19a09fb
fix(examples): make run-mxc-e2e harness correct and orphan-free

jamieknvidia
authored and
araza008
committed
c08fbb7
fix(e2e): probe timeout is milliseconds (10ms->30000ms)

jamieknvidia
authored and
araza008
committed
52aad8d
fix(mxc): use native paths in real runtime probes

shailendra-nv
authored and
araza008
committed
2633ecd
fix(mxc): make processcontainer work with mxc-latest-released wxc-exec

pkhodade-NV
authored and
araza008
committed
3dc9d1e
fix(e2e): address CodeRabbit review on run-mxc-e2e.ps1 (MR !46)

jamieknvidia
authored and
araza008
committed
1618d18
feat(mxc-e2e): collect run-mxc-e2e output into a results bundle

pkhodade-NV
authored and
araza008
committed
1a9badf
fix(mxc-e2e): address CodeRabbit review on run-mxc-e2e.ps1

pkhodade-NV
authored and
araza008
committed
3460368
fix(examples): pass gateway config via OPENSHELL_GATEWAY_CONFIG for spaced paths

jamieknvidia
authored and
araza008
committed
19d763a
fix(run-mxc-e2e): improve scoring logic and enhance command execution handling
araza008
committed
aab2d38
fix(mxc): reconcile proxy support after rebase
araza008
committed
c06fc6a
fix(mxc): grant sandbox access to proxy CA
araza008
committed
419d3b7
fix(mxc): reject unsupported network middleware
araza008
committed
130a81d
fix(mxc): reconcile host proxy with main
araza008
committed
a536b3a
fix(build): switch to bundled Z3 for Windows MSVC builds
araza008
committed
80bc499
feat(policy): add portable UI policy controls

shailendra-nv
authored and
araza008
committed
58130b8
fix(policy): address UI policy review feedback

shailendra-nv
authored and
araza008
committed
af10ba6
feat: enhance MXC backend with provider credential management
araza008
committed
65aadb8
feat(mxc): validate provider credentials through host proxy
araza008
committed
2f46a0d
feat(mxc): route provider credentials through host proxy
araza008
committed
2e051be
docs(mxc): correct the default backend
araza008
committed
059cbe6
docs(mxc): scope isolation session prerequisites
araza008
committed
4ffe943
test(mxc): fail closed on artifact scan errors
araza008
committed
8ad5413
test(mxc): redact probe output before logging
araza008
committed
26ab4e5
fix(policy): reuse provider snapshot for merge validation
araza008
committed
cbd253f
fix(auth): authorize provider environment access
araza008
committed
bbb7264
fix(mxc): reject expiring credential snapshots
araza008
committed
0eb0b3b
docs(mxc): define the host proxy trust boundary
araza008
committed
8bb92c3

Commits on Sep 12, 2026

fix(mxc): harden provider credential test runner
araza008
committed
0565203