Skip to content

website: bring Sentinel status up to date with pkg-registry - #101

Merged
tonibergholm merged 1 commit into
mainfrom
sentinel-data-refresh
Jul 9, 2026
Merged

tonibergholm merged 1 commit into
mainfrom
sentinel-data-refresh

Conversation

@tonibergholm

Copy link
Copy Markdown
Member

Why

The Sentinel page and the homepage pillar still described the project as it was at the wedge stage — "auditing proxy live · policy & permissions next". The pkg-registry repo has since shipped the entire layer (phases through 25) and its current work is OSS launch prep, so the site undersold the project and stated a stale roadmap.

What

Copy-only changes to website/src/pages/sentinel.astro and the Sentinel pillar in index.astro, sourced from pkg-registry's CLAUDE.md phase log and README as of 2026-07-09:

  • Status badge / meta line: "auditing proxy live · policy & permissions next" → "full security layer built · open-source launch prep"
  • Sandbox bullet now states the phase-25 deny-by-default posture (writes outside a fixed floor and $HOME reads denied, not just secrets/network)
  • Policy bullet adds lint + dry-run impact preview and Ed25519 role tokens on the control plane
  • Agent-surfaces bullet adds sentinel explain remediation (advisory-only)
  • New bullets: identity/release-anomaly signals, durable SQLite observability, hardened network trust boundary (SSRF/Host-spoofing/byte caps/rate limits)
  • Status paragraph rewritten to the "wedge → full layer" framing with a month-level date (July 2026), keeping the long-arc line

Verified with npm run build — all 4 pages generate cleanly. The demo transcript on the page was checked against npm run demo output in the pkg-registry README and left unchanged (still accurate).

The Sentinel page and homepage pillar still said 'auditing proxy live,
policy & permissions next' — the pkg-registry repo has since shipped the
whole layer (phases through 25): signed policy with lint + dry-run
preview, control-plane role tokens, a deny-by-default sandbox (writes
and $HOME reads), sentinel explain remediation, identity and
release-anomaly signals, durable SQLite observability, and a hardened
network trust boundary. Current work there is OSS launch prep. Sourced
from pkg-registry's CLAUDE.md phase log and README as of 2026-07-09.
Copilot AI review requested due to automatic review settings July 9, 2026 14:42

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the website copy for Sentinel to reflect its current state (full security layer shipped) as tracked in the pkg-registry repo, removing wedge-stage roadmap language and expanding the feature bullets/status narrative accordingly.

Changes:

  • Updated Sentinel status badge/meta lines to “full security layer built · open-source launch prep”.
  • Expanded “How it works” bullets on the Sentinel page to reflect the deny-by-default sandbox posture, policy gate capabilities, and additional signals/observability/trust-boundary items.
  • Rewrote the Sentinel status paragraph to the “wedge → full layer” framing with a July 2026 timestamp.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
website/src/pages/sentinel.astro Refreshes Sentinel page status line, feature bullets, and status paragraph to match current shipped capabilities.
website/src/pages/index.astro Updates the Sentinel homepage pillar copy and meta/status line to match the refreshed Sentinel positioning.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@tonibergholm
tonibergholm merged commit d5d7fa0 into main Jul 9, 2026
10 checks passed
@tonibergholm
tonibergholm deleted the sentinel-data-refresh branch July 9, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants