feat(prover): check process, Landlock, and destination IP containment

[johnnygreco]

Summary

Extend and harden the standalone policy boundary checker for process identity, Landlock compatibility, and destination IP containment, while finalizing its unreleased result contract.

This ports commit d3b79032d3e1a2cc29a7b5a105e362439331bef5 onto the current standalone-prover branch and adapts it to the canonical policy schema and boundary terminology.

Related Issue

Relates to #2109.

Changes

• Check supported run_as_user and run_as_group changes and Landlock compatibility changes
• Model IPv4, IPv6, and CIDR destination restrictions alongside existing network authority
• Include typed process, Landlock, filesystem, and network counterexamples, including destination IP and trusted-gateway evidence
• Fail closed for overlapping exact and wildcard endpoints whose implicit destination modes differ
• Apply cancellation and aggregate resource limits before supported-shape validation, with bounded indexed cross-protocol overlap validation
• Preserve definitive expansion findings when another process identity change is unresolved
• Expose an extensible reusable Rust API with constructor-based options and documented matching patterns
• Keep schema_version and prover_version as result metadata, and use coverage.domains as the machine-readable modeled-policy-domain declaration
• Reserve scope terminology for OpenShell's existing authorization, workspace, configuration, and rule-boundary concepts
• Document coverage, assumptions, resource limits, output contracts, and unsupported cases

Testing

• cargo test -p openshell-prover -p openshell-prover-cli
• External-crate API construction and matching tests
• Exact JSON and text result-contract tests
• Resource-limit ordering and bounded overlap-index regressions
• mise run pre-commit
• mise run ci
• E2E tests added/updated (not applicable: standalone checker and documentation only)

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[github-actions]

🌿 Preview your docs: https://nvidia-preview-pr-3394.docs.buildwithfern.com/openshell

[johnnygreco]

/ok to test b854cf3

[johnnygreco]

/ok to test 1bf000a

[johnnygreco]

/ok

[johnnygreco]

/ok to test 20f27f2

[johnnygreco]

/ok to test 7b4e67c

[johnnygreco]

/ok to test 8fd494c

[johnnygreco]

/ok to test cd712d9

[pimlock]

gator-agent

PR Review Status

This roadmap-backed policy-prover change is project-valid, and the initial code-only review found no blocking issues. The current head has passed every required check, so Gator’s implementation and pipeline review are complete.

Action required: A maintainer other than the author should review and either approve or request changes.

Blocking findings:

• No blocking findings remain

Carried findings:

• None

Non-blocking suggestions:

• None

Gator metadata

• Validation: Maintainer-authored work supports roadmap issue Enterprise permission modes with managed maximum policies #2109, and no competing implementation was found.
• Docs: Updated in docs/reference/policy-prover.mdx; existing navigation remains applicable.
• Checks: Branch Checks, Helm Lint, Trivy Changes, and DCO are green on the current head.
• E2E: N/A — this changes the standalone prover and its documentation, not runtime sandbox behavior.
• Head SHA: ddee3d03619506ce84d8244fb467f3b4ba48133c
• Base SHA: c5a8c4d220c79185ed27df4494157ac5ca887837
• Merge base SHA: c5a8c4d220c79185ed27df4494157ac5ca887837
• Patch ID: ddae5086f7c4a13dc24de35cc38e7e4810f693f8
• Gator payload: 9
• Review mode: initial
• Previous reviewed SHA: none
• Review budget exhausted: no
• Maintainer decision required: no — only the normal independent approval remains.
• Next state: gator:approval-needed

[pimlock]

gator-agent

Monitoring Complete

Monitoring is complete because this PR has merged.

Final status: The PR reached gator:merge-ready, received maintainer approval, and merged successfully.

I removed the active gator:* label because there is nothing left for gator to monitor on this PR.

Gator metadata

• Head SHA: ddee3d03619506ce84d8244fb467f3b4ba48133c
• Gator payload: 9
• Final state: merged