$ the-wire · showcase
Guardrails ships hooks-server proxy stack, sandbox-runtime closes a SOCKS MITM bypass
By RepoJournal · Filed · About Agent Security · Composed from the cited sources · methodology
NeMo Guardrails' hooks-server now runs from YAML manifests with Prometheus telemetry and OpenAPI generated at build time, while sandbox-runtime fixes a path where SOCKS5 traffic to a mitmProxy domain skipped the interception socket entirely.
proxy: a SOCKS CONNECT to a mitmProxy host goes through the MITM socket anthropics/sandbox-runtime
With network.mitmProxy configured, an HTTP CONNECT to one of its domains was tunnelled into the MITM proxy's unix socket, but a SOCKS5 CONNECT to the same host was dialed directly or through parentProxy, so the MITM proxy never saw that connection. createSocksProxyServer now takes the same getMitmSocketPath hook the HTTP proxy already had and SandboxManager passes it to both, which means traffi...
feat(server): launch proxy applications from YAML manifests NVIDIA-NeMo/Guardrails
nemoguardrails can now launch proxy applications from bounded YAML manifests through server-owned validate, inspect, schema and serve commands, so a config file becomes the deployable unit instead of Python glue. A local Rails example ships alongside it.
feat(hooks): Add hooks-server Prometheus metrics exporter NVIDIA-NeMo/Guardrails
The hooks-server gets the same opt-in Prometheus exporter nemoguardrails server already has, so tool policy and per-tool rail decisions show up in the metrics pipeline you already scrape rather than only in logs.
feat(server): compose proxy applications from typed configuration NVIDIA-NeMo/Guardrails
Provider instances, operations, dialects and Rails configs are now selectable via typed Python configuration that reuses the existing application assembly, with no runtime policy generation. Operators who build proxies in code get a typed entry point instead of hand-assembled configs.
ci(docs): generate OpenAPI at build time NVIDIA-NeMo/Guardrails
The API reference no longer depends on a handwritten OpenAPI file that drifts from the FastAPI server: the contract is generated during docs builds by an offline, deterministic exporter, and fern/openapi.yml becomes an ignored build artifact. For operators, the published API reference now tracks the server you actually run.
feat(agent-os): add OCSF schema converter and sink for CloudEvents tr… (#4323) microsoft/agent-governance-toolkit
Also landing: agent-os gains an OCSF schema converter and sink for CloudEvents trace events, aimed at putting governance audit, policy and trace events into OCSF-speaking SIEMs and security data lakes, and the haystack-agentmesh AuditLogger now snapshots entry metadata at record time so post-call mutation no longer makes verify_chain() flag an untouched log as tampered.
Action items
- → Upgrade anthropics/sandbox-runtime past this fix if you rely on network.mitmProxy interception, then re-verify that S... anthropics/sandbox-runtime [plan]
