Skip to content

docs(readme): cover proxy tools and refresh the comparison table - #21

Merged
paveq merged 1 commit into
mainfrom
docs/readme-v2-proxy-compare
Oct 28, 2026
Merged

paveq merged 1 commit into
mainfrom
docs/readme-v2-proxy-compare

Conversation

@paveq

@paveq paveq commented Oct 28, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Proxy tools up front. The intro and "What you get" now say that an API with no CLI is reachable through a proxy tool, with the key attached on the wire and host / METHOD /path rules enforced.
  • "How Airlock compares" rewritten.
    • Airlock's column no longer says HTTP APIs are reachable only "via the CLI".
    • Competitor columns are updated: claw-wrap proxy mode, fnox credential proxy and leases, nono phantom tokens, and actual licenses.
    • The table is dated "as of October 2026".
    • A new row separates "real credential handed to a CLI" (non-HTTP, request signing) from HTTP injection.
  • Corrected against the v2 code:
    • Proxy tools need Linux 6.7+ (Landlock ABI v4), HTTPS on port 443 only, and one header inject per route.
    • session reload has no --config.
    • The claude-relaxed profile is documented.
    • run -v only lists kit names and modes.
    • Daemons started manually never shut down when idle.
    • The list of commands refused inside the sandbox is complete.
    • [agent].kits, the placeholder rules and the sandbox's built-in file access are corrected.

Review notes

Two comparison cells are carried over or inferred, not confirmed against upstream docs:

  • nono: no output redaction.
  • Agent Vault: no short-lived upstream credentials (its short-lived tokens are for access to Agent Vault itself).

Related bug found while checking: #20 (trust --expect-sha256 mismatch message is dropped).

🤖 Generated with Claude Code

The README predated proxy tools in its framing: the intro and the
"How Airlock compares" table still presented Airlock as process-layer
only, with HTTP APIs reachable just "via the CLI". Proxy tools now inject
API keys on the wire with host and METHOD /path rules, so the intro,
"What you get" and the table say so. The other tools in the table have
moved too (claw-wrap and fnox gained credential proxies, fnox leases,
nono phantom tokens), so their columns are updated and dated.

Also corrects details that drifted from the v2 code:
- proxy tools need Landlock ABI v4 (Linux 6.7+), HTTPS on 443 only,
  one header inject per route, single-label wildcards
- `session reload` takes no `--config`; `claude-relaxed` profile exists
- `run -v` lists kit names and modes only, not their paths
- a daemon started with `daemon start`/`restart` never idle-exits
- `init --global` and `tools list --session` are refused in the sandbox
- `[agent].kits`, placeholder scope, and the access-level baselines
@paveq
paveq merged commit 28a3ce2 into main Oct 28, 2026
5 checks passed
@paveq
paveq deleted the docs/readme-v2-proxy-compare branch October 28, 2026 09:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant