Add AST-based security middleware and enforcement wiring

2026-02-23 14:21:22 -05:00
parent 9b4216dda9
commit ef2a25b5fb
28 changed files with 1936 additions and 37 deletions
--- a/docs/pipeline-policies.md
+++ b/docs/pipeline-policies.md
@@ -14,6 +14,7 @@
 - `PipelineExecutor` (`src/agents/pipeline.ts`)
  - Coordinates DAG traversal and retry behavior.
  - Computes aggregate run status from executed terminal nodes plus critical-path failures.
+  - Applies dedicated `SecurityViolationError` handling policy (`hard_abort` or `validation_fail` mapping).

 ## Aggregate status semantics