mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 5
683de0ab9a
One audited implementation, instantiated once per provider application rather than deployed as a single process holding every application's credential. Each instance joins only its provider's network, carries only that provider's least-privileged credential and serves a distinct endpoint. Every decision lives in the policy layer, which validates the contract at startup rather than at first call, so an instance missing a limit, an allowlist or the schema hash never reaches a client. The server itself only moves bytes over three JSON-RPC methods, with no stream state to get wrong. Its upstream header is configurable because only half the providers accept an RFC 6750 bearer. The contract probe runs at deploy time rather than in Playwright, because it needs the provider's real credential and a Playwright trace would capture it. It proves, over both transports, that an unauthenticated caller is refused, that a wrongly authenticated one is refused, that the handshake completes, that the served tool list is exactly the contracted one, and that one deterministic read answers without an error. Steps one and two are what separate a guarded endpoint from one that merely happens to be unreachable. The isolation probe counts the sidecar's network interfaces from inside it. Reachability cannot be used here: an unknown name does not fail to resolve in this environment, it falls through to a wildcard resolver that answers every name with one reachable address. The role is inert until a provider includes it; those inclusions follow. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
6 lines
131 B
YAML
6 lines
131 B
YAML
---
|
|
- include_tasks: 00_core.yml
|
|
when: run_once_svc_ai_mcp_adapter is not defined
|
|
vars:
|
|
application_id: svc-ai-mcp-adapter
|