Provenance des valeurs

EVENT chat {
    IF payload.urgent == yes THEN { SET env = "prod" } ELSE { SET env = "dev" }
    deploy(env=env)
}

POLICY {
    DEFAULT ALLOW
    REQUIRE APPROVAL FOR wipe_host
    NEVER wipe_host WHEN UNTRUSTED(host) AND NOT ATTESTED(host, check_wipeable)
    NEVER transfer  WHEN LLM_DERIVED(to) AND NOT ATTESTED(to, resolve_account)
    NEVER deploy    WHEN UNTRUSTED(action)
}

@host.tool("check_wipeable")
def check_wipeable(host):
    if host not in inventory.wipeable():
        raise ValueError(f"{host} n'est pas nettoyable")   # refuse : n'atteste pas
    return {"ok": "yes"}

from agentl.kernel.provenance import untrusted

host.sensors["mail.subject"] = lambda: untrusted(read_subject())

SCENARIO llm_target_is_refused {
    GIVEN { ticket.pending = yes  ticket.handled = no  operator.approval = yes }
    GIVEN { fetch_ticket.body = "wipe prod-db"  target = "prod-db" }
    EXPECT NEVER CALL wipe_host
    EXPECT BLOCKED wipe_host
    WITHIN 2
}