master

Jjweiaefeat(cerberus): collect network access audit alongside file access

8fd53504创建于 6月6日历史提交

文件	最后提交记录	最后更新时间
configuration.md	feat(cerberus): collect network access audit alongside file access Extend the unified eBPF audit session to also record network access events, so one execution returns two independent audit streams instead of only file access. - audit: add NetworkAccessRecord / NetworkAccessCollector mirroring the file-access records. The record's result is the policy enforcement verdict (allowed / denied_by_policy / monitored) when a network policy is active, otherwise the kernel-observed result. Share system_time_to_nanos between both record types. - policy: add an independent network_audit flag, decoupled from network_policy and symmetric with file_access_audit. With a policy active the records carry the enforcement verdict; without one they are pure observations. Wired through PolicyBuilder, serde and the profiles. - session: gate network collection on network_audit (not on the enforcer's presence). Consolidate the enforcer plus both collectors into a single EventSinks value threaded through the poll loop, so run_poll_loop/drain_once/dispatch take one argument instead of several parallel Options. finish() returns EbpfAuditOutput { file_accesses, network_accesses } and drain quiescence is measured across both collectors. - result: add ExecResult.network_accesses. - cli: generalize the audit emitter; network audit uses the CERBERUS_NETWORK_AUDIT_PATH sidecar, symmetric with file access. - docs: document the network audit output channel, the independent toggle and its decoupling from network_policy. Network enforcement behavior is unchanged: process() still kills in enforce mode; the verdict is now additionally recorded rather than dropped (it was previously computed and discarded).	1 个月前
runtime-capability-matrix.md	docs(cerberus): add setup and capability documentation Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2 个月前
storage.md	docs(cerberus): add setup and capability documentation Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2 个月前