feat(evals): Tier-0/Tier-1 sandbox profiles + Recce-aware strip (DRC-3584, DRC-3430) - #36

Merged

even-wei merged 13 commits into

mainfrom

feature/drc-3584-sandbox-profiles

Jun 3, 2026

Commits on May 28, 2026

feat(evals): Tier-0/Tier-1 sandbox profiles + Recce-aware strip (DRC-3584, DRC-3430)
even-wei
committed
0aa6b91
fix(evals): address PR #36 review — Python hooks + expanded strip (DRC-3584, DRC-3430)
even-wei
committed
e91ec19

Commits on May 29, 2026

fix(evals): close cycle-review bypasses (Tier-1 dbt flag-with-value + exec wrappers)
even-wei
committed
5beb6a5
fix(evals): close iter-2 bypasses (eval / \$() smuggling / dbt clone+retry)
even-wei
committed
76d7640
refactor(evals): hooks → bashlex AST parser (DRC-3584 v5, closes iter-3 bypasses)
even-wei
committed
5b92f50
fix(evals): close iter-4 BLOCKERs (process sub / CompoundNode / brace / xargs-chain / \$0)
even-wei
committed
977d175
docs(evals): add non-adversarial threat-model section to ENFORCEMENT.md
even-wei
committed
1384864
feat(recce): opt-in PostHog telemetry scaffolding for /recce-verify (DRC-3597) (#38)
Even Wei
authored
11a6d88
feat(evals): Karpathy spike driver for /recce-verify v1 eval (DRC-3586) (#37)
Even Wei
authored
1d3c95d

Commits on Jun 1, 2026

fix(evals): close iter-6 BLOCKER (git history leak) + ISSUE (Tier-1 dbt policy)
even-wei
committed
6f20289
chore(evals): address iter-7 NOTEs — remove dead Tier-1 dbt code + doc drift
even-wei
committed
ff46b98
fix(evals): close iter-8 BLOCKERs + ISSUEs on spike driver + overlays
even-wei
committed
80d5ea3

Commits on Jun 2, 2026

fix(evals): close iter-8 BLOCKER (Tier-0 overlay leak via cwd) structurally
even-wei
committed
8b5a504