EPURE Security & Trust Boundaries Architecture

Dual GitHub Apps, 2-Phase Kernel Sandbox, Multi-Provider LLMClient, SSRF-Safe Web Tools & Environment Isolation

EPURE Security & Trust Boundaries Architecture Dual GitHub Apps, 2-Phase Kernel Sandbox, Multi-Provider LLMClient, SSRF-Safe Web Tools & Environment Isolation GitHub Events · Issues & PRs · Architecture component · untrusted input GitHub Events Issues & PRs untrusted input Git Ref CAS · refs/epure/state/* · Architecture component · spec_sha signed Git Ref CAS refs/epure/state/* spec_sha signed Job 1: Auth Gate · authorize-command · EPURE Trusted Control Plane (env: <llm-env>) · 0 App/LLM secrets Job 1: Auth Gate authorize-command 0 App/LLM secrets Orchestrator · Job 2: env <llm-env> · EPURE Trusted Control Plane (env: <llm-env>) · issue-N lock Orchestrator Job 2: env <llm-env> issue-N lock iFixAi Audit · trajectory gate · EPURE Trusted Control Plane (env: <llm-env>) · deterministic iFixAi Audit trajectory gate deterministic Multi-Provider LLM · Gemini/OpenAI/Anthropic · EPURE Trusted Control Plane (env: <llm-env>) · env: <llm-env> Multi-Provider LLM Gemini/OpenAI/Anthropic env: <llm-env> dev Roster · XML diff & web guards · EPURE Trusted Control Plane (env: <llm-env>) · OWASP LLM01 dev Roster XML diff & web guards OWASP LLM01 Agent App · plan / task / feature · EPURE Trusted Control Plane (env: <llm-env>) · ephemeral JWT Agent App plan / task / feature ephemeral JWT 2-Phase Sandbox · bwrap/landrun + rtk · 2-Phase Kernel Sandbox (0 Secrets) · --unshare-net 2-Phase Sandbox bwrap/landrun + rtk --unshare-net Release App · dev -> main + vX.Y.Z · Architecture component · env: release Release App dev -> main + vX.Y.Z env: release webhook write+ CAS ref JSON from dev 0 secrets trace publish human gate EPURE Trusted Control Plane (env: <llm-env>) 2-Phase Kernel Sandbox (0 Secrets) Legend Backend Database Cloud Security External