Capture LLM trajectories across OAuth and API-key runs - #1057

Open

bingran-you wants to merge 74 commits into

mainfrom

bry/llm-trajectory-all-auth

Commits on Aug 29, 2026

feat: capture LLM trajectories across auth modes
bingran-you
committed
2286195
chore: update RestrictedPython security fix
bingran-you
committed
9bc7d36
style: format trajectory capture modules
bingran-you
committed
77fcef6
fix: harden mixed-auth trajectory capture
bingran-you
committed
4c3ae11
fix: isolate reused rollouts and scene roles
bingran-you
committed
f905374
fix: scope native session collection
bingran-you
committed
744d43c
fix: reset retried Claude capture state
bingran-you
committed
ffe3dca
fix: preserve provider rows across runtime switches
bingran-you
committed
effc132
fix: fail closed on incomplete capture artifacts
bingran-you
committed
a324ccb
fix: bind native capture to ACP sessions
bingran-you
committed
ee19fbb
fix: fail closed on capture finalization
bingran-you
committed
69ed435
fix: track collector ownership before readiness
bingran-you
committed
bee8001
fix: harden provisional capture cleanup
bingran-you
committed
2f11725
fix: preserve native sessions across reconnects
bingran-you
committed
cedef52
fix: isolate multi-target native capture
bingran-you
committed
4b671b5
fix: reconcile partial native captures
bingran-you
committed
c1abd52
fix: reject empty legacy trajectory artifacts
bingran-you
committed
fa6cbf5
fix: attribute translated provider model aliases
bingran-you
committed
72f478d
fix: stamp provider route identity in capture
bingran-you
committed
ae2ccb1
fix: refresh stitched capture manifests
bingran-you
committed
16d14bc
fix: require sidecars for schema-v2 captures
bingran-you
committed
93bfddd
fix: fail closed on lost continuation calls
bingran-you
committed
eee5952
fix: finalize continuation capture artifacts
bingran-you
committed
5426420
fix: refinalize continuation after cleanup
bingran-you
committed
59883c6
fix: quiesce capture and bind provider roles
bingran-you
committed
f6daaf2
fix: journal late calls and refine role matching
bingran-you
committed
11e0168
fix: close capture trust and shutdown gaps
bingran-you
committed
6fa3151
fix: retire quiesce handler before acknowledgement
bingran-you
committed
767dcde
fix: invalidate stale LiteLLM attempt journals
bingran-you
committed
9c788d0
fix: enforce provider capture custody boundary
bingran-you
committed
b709ec1
refactor: isolate continuation trajectory artifacts
bingran-you
committed
89e720d
fix: close native capture review gaps
bingran-you
committed
c151761
fix: preserve canonical provider requests
bingran-you
committed
6043514
fix: preserve provider capture fidelity
bingran-you
committed
5b962c6
fix: fail closed on capture provenance
bingran-you
committed
87166fb
fix: preserve audit continuation results
bingran-you
committed
f0746ab
test: split native capture resilience cases
bingran-you
committed
206c13d
fix: fail closed on unverified capture states
bingran-you
committed
750de4a
fix: reject incomplete audit capture metadata
bingran-you
committed
58c1e04
fix: validate audit completion per role
bingran-you
committed
ad2f666
fix: preserve repeated replay completion
bingran-you
committed
f5a38de
fix repeated continuation model provenance
bingran-you
committed
9bf15d8
require redacted payloads for training
bingran-you
committed
3885e0d
Harden provider capture artifact custody
bingran-you
committed
8dad07a
Keep agent-visible provider credentials audit-only
bingran-you
committed
914e5ff
Strip alternate credentials from proxy agents
bingran-you
committed
3d6d198
Harden proxy credential and continuation journals
bingran-you
committed
142910a
Sanitize Codex config and package redactor data
bingran-you
committed
0aa771c
Preserve direct Codex provider settings
bingran-you
committed
e139e62
refactor llm capture runtime custody
bingran-you
committed
1fabaf0

Commits on Aug 30, 2026

reject contradictory capture manifests
bingran-you
committed
ebd0e04
close llm capture provenance gaps
bingran-you
committed
e685ab6
preserve opencode manifest parity
bingran-you
committed
0e4ed71
Harden proxy config and role capture admission
bingran-you
committed
e113d0e
Require attribution and isolate subscription auth
bingran-you
committed
33590d3
Harden proxy auth config homes
bingran-you
committed
d8342c6
Harden effective proxy auth homes
bingran-you
committed
ee73718
fix(auth): make proxy credential cleanup race-safe
bingran-you
committed
42e3d99
fix(auth): scope stale process isolation
bingran-you
committed
d4557e9
fix(auth): gate every proxy agent on process isolation
bingran-you
committed
88fc1b5
fix(auth): sanitize Claude credential settings
bingran-you
committed
7183e73
fix(auth): replace stale Pi providers in proxy mode
bingran-you
committed
b2ca3f3
fix(auth): scrub stale Pi config before proxy launch
bingran-you
committed
aa078e0
fix(capture): preserve role usage and block privilege regain
bingran-you
committed
df51305
test(capture): use matching Linux user group
bingran-you
committed
200b107
fix: preserve zero-call OAuth completion
bingran-you
committed
c3ac7f2
fix: aggregate mixed-auth token usage
bingran-you
committed
f071fd5
fix: honor primary role-scoped credentials
bingran-you
committed
3f58679
fix: isolate credentials across agent roles
bingran-you
committed
1f18b77
fix: quiesce native capture roles safely
bingran-you
committed
b21b1aa
fix: restore OAuth credentials on role reconnect
bingran-you
committed
5646fe8
fix: close proxy and continuation provenance gaps
bingran-you
committed
bd768e0
fix: isolate all OpenCode config authorities
bingran-you
committed
b45e2aa
fix: validate audit artifacts before completion
bingran-you
committed
2725574