@murk-security/runner-darwin-x64 0.7.1 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/harness +0 -0
- package/package.json +1 -1
- package/runners/basic_harness_run.py +6 -0
package/bin/harness
CHANGED
|
Binary file
|
package/package.json
CHANGED
|
@@ -1093,6 +1093,12 @@ def main() -> int:
|
|
|
1093
1093
|
"-max-cost", os.environ.get("BASIC_HARNESS_MAX_COST", prof["max_cost"]),
|
|
1094
1094
|
"-compact-tokens", "100000", "-ui", "", "-hold=false",
|
|
1095
1095
|
]
|
|
1096
|
+
# How far the agents may go. Pass the spec's action tier through to the harness so the Go
|
|
1097
|
+
# side (the exploiter agent and its tier-gated behaviour) matches what prod_env enforces for
|
|
1098
|
+
# its ops on the same spec. Without this the harness stayed at its "passive" default no matter
|
|
1099
|
+
# the spec. The harness fail-closes to passive on anything unrecognized.
|
|
1100
|
+
action_tier = str((spec.get("policy") or {}).get("actionTier") or "passive")
|
|
1101
|
+
cmd += ["-action-tier", action_tier]
|
|
1096
1102
|
# Route model calls through the murk model gateway when the control plane set
|
|
1097
1103
|
# OPENROUTER_BASE_URL (then OPENROUTER_API_KEY is a signed gateway token, not the
|
|
1098
1104
|
# OpenRouter key); direct to OpenRouter otherwise.
|