feat(assistant): constrain private handoffs to host-pinned household queries #1630
Open
lytedev
wants to merge 2 commits from
propose/private-query-handoff-purpose into main
pull from: propose/private-query-handoff-purpose
merge into: lytedev:main
lytedev:main
lytedev:propose/private-query-canonical-ingress
lytedev:propose/private-query-client-protocol
lytedev:propose/private-query-tool-guard
lytedev:propose/private-query-notice-tickets
lytedev:propose/native-agent-turn-diagnostics
lytedev:propose/tv-proxy-request-admission
lytedev:propose/household-typed-services
lytedev:propose/tv-seekable-private-stream
lytedev:propose/household-ha-intent-client
lytedev:propose/native-agent-real-service-proof
lytedev:propose/tv-native-video-proof
lytedev:propose/private-media-receiver-proof
lytedev:propose/jellyfin-private-playback
lytedev:propose/tv-player-private-stream
lytedev:propose/household-tool-task-authority
lytedev:propose/home-assistant-builtin-agent
lytedev:propose/voice-adapter-verification-status
lytedev:propose/andromeda-local-spoken-proof
lytedev:propose/gateway-session-failure-diagnostics
lytedev:propose/authenticated-voice-reply-playback
lytedev:propose/andromeda-spoken-agent-proof
lytedev:propose/preauthorized-agent-actions
lytedev:propose/voice-proof-compact-token
lytedev:propose/voice-adapter-e2e-proof
lytedev:propose/legacy-guarded-chat-tests
lytedev:propose/household-publication-proof
lytedev:propose/ambient-room-turn-authority
lytedev:propose/kanidm-root-class-attestation
lytedev:propose/voice-configuration-fixture-contract
lytedev:propose/household-person-attestation
lytedev:propose/publication-guards-followup
lytedev:propose/conversation-publication-guards
lytedev:propose/desktop-lock-capabilities
lytedev:propose/household-human-credential
lytedev:propose/household-human-extraction
lytedev:propose/desktop-multiplex-intent
lytedev:propose/household-chat-sops
lytedev:propose/nabu-core-voice-bridge
lytedev:propose/voice-hub-bridge-access
lytedev:propose/ambient-room-configuration
lytedev:propose/compact-service-token-auth
lytedev:propose/household-discovery-revocation
lytedev:propose/kanidm-service-conformance
lytedev:propose/ambient-room-admission
lytedev:propose/command-private-scope-sdk-tests
lytedev:propose/command-private-scope
lytedev:propose/conversation-actor-provenance
lytedev:propose/voice-service-configuration
lytedev:propose/browser-provider-clock
lytedev:propose/household-review-admission
lytedev:propose/household-human-audience
lytedev:propose/approval-phone-actions
lytedev:propose/command-approval-identity
lytedev:propose/approval-browser-proof
lytedev:propose/agent-management-json-endpoint
lytedev:propose/voice-room-transport
lytedev:propose/assistant-private-inference-route
lytedev:propose/foxtrot-mutable-experiments
lytedev:propose/rog5-boot-canonical-20261028
lytedev:propose/assistant-core-session-endpoint
lytedev:propose/rog5-responsive-settings-20261028
lytedev:propose/assistant-session-open-reason
lytedev:propose/workspace-root-on-build
lytedev:propose/assistant-auth-failure-reason
lytedev:propose/andromeda-on-dragon-plan
lytedev:propose/rog5-canonical-host
lytedev:propose/slippi-host-nixpkgs
lytedev:propose/mail-notify-dedup
lytedev:scratch/andromeda-provision
lytedev:scratch/andromeda-sweep-flake-issue
lytedev:scratch/andromeda-core-runtime-test
lytedev:scratch/andromeda-gateway-host
lytedev:scratch/andromeda-core-composition
lytedev:scratch/assistant-andromeda-runtime
lytedev:scratch/assistant-submission-result
lytedev:scratch/assistant-browser-gateway
lytedev:scratch/assistant-gateway-oauth
lytedev:scratch/assistant-gateway-core-client
lytedev:scratch/assistant-gateway-envelope
lytedev:scratch/assistant-ingress-ledger
lytedev:scratch/assistant-context-dispositions
lytedev:scratch/assistant-authenticated-kernel
lytedev:scratch/assistant-authenticated-kernel-tests
lytedev:propose/assistant-core-service-policy
lytedev:propose/assistant-canonical-kernel-tests
lytedev:propose/assistant-core-owner-records
lytedev:propose/assistant-owned-runtime-final-join
lytedev:propose/assistant-owned-runtime
lytedev:propose/pi-scratch-extension
lytedev:propose/agent-workspace-inventory
lytedev:propose/assistant-review-readsets
lytedev:propose/assistant-review-runtime-sdk-tests
lytedev:propose/claude-ws-project-layout
lytedev:propose/assistant-review-admissions
lytedev:propose/assistant-review-source-tests
lytedev:propose/assistant-reminder-runtime
lytedev:propose/assistant-reminder-sdk-tests
lytedev:propose/assistant-host-service-scopes
lytedev:propose/assistant-reminder-dispatch
lytedev:propose/assistant-model-transport-hardening
lytedev:propose/assistant-scoped-context-runtime
lytedev:propose/assistant-canonical-context
lytedev:propose/assistant-canonical-effect-journal
lytedev:propose/assistant-context-store-adapter
lytedev:propose/assistant-host-data-scopes
lytedev:propose/assistant-scoped-worker-env
lytedev:propose/assistant-worker-rpc-authority
lytedev:propose/assistant-causal-authority
lytedev:propose/assistant-run-authority-records
lytedev:propose/assistant-task-authority-foundation
lytedev:propose/assistant-task-context
lytedev:propose/assistant-worker-execution-env
lytedev:propose/assistant-worker-env-rpc
lytedev:propose/assistant-runtime-dependencies
lytedev:propose/assistant-worker-boundary
lytedev:propose/assistant-worker-filter
lytedev:propose/assistant-turn-admission
lytedev:propose/assistant-conversation-authority
lytedev:propose/assistant-conversation-policy
lytedev:propose/assistant-principal-authority
lytedev:propose/assistant-shared-core
lytedev:propose/assistant-profile-policy
lytedev:propose/assistant-runtime-owner
lytedev:propose/assistant-unification-plan
lytedev:propose/assistant-intent
lytedev:propose/rascal-ram-rescue
lytedev:propose/assistant-pg-harness-fix
lytedev:propose/assistant-pg-runtime-normalized
lytedev:propose/assistant-postgres
lytedev:propose/assistant-pg-harness
lytedev:propose/assistant-pg-runtime
lytedev:propose/assistant-pg-state
lytedev:draft/andromeda-stream-transport
lytedev:propose/niri-start-locked
lytedev:propose/andromeda-web-nix
lytedev:propose/andromeda-web-shared
lytedev:propose/deploy-switch-default
lytedev:propose/lyte-suite-desktops
lytedev:propose/nix-cache-cascade-ephemeral-ports
lytedev:propose/household-kiosk
lytedev:propose/xwayland-ei-display-from-client
lytedev:propose/steamdeck-mouse-steps-aside-for-games
lytedev:propose/lpcamm-watch
lytedev:propose/agents-where-information-lives
lytedev:propose/tuwunel-1.9.2
lytedev:propose/admindevice-ssh-anything
lytedev:propose/kdeconnect-announce
lytedev:steamdeck-mgba
lytedev:propose/bc250-40cu-measured
lytedev:propose/pitft-stmpe-drive
lytedev:propose/foxtrot-multiboot-prep
lytedev:propose/kexec-luks-reboot
lytedev:propose/foxtrot-multiboot
lytedev:propose/foxtrot-vm-seats
lytedev:propose/calendar-alarms
lytedev:pinephone-niri
lytedev:propose/spoof-reject-cleanups
lytedev:propose/finance-pipeline
lytedev:steamframe-plan
lytedev:pinephone-buildable
lytedev:deck-pose-wip
lytedev:aerc-open-html
lytedev:local-auth-unification
lytedev:iamb-dotfiles
lytedev:esphome-music-panel
lytedev:wifi-system-profile
lytedev:gauge-history
lytedev:validate-gate-fix2
lytedev:validate-slot-no-hugepages
lytedev:pinephone-reenable
lytedev:cyberdeck-research
lytedev:git-anon-ratelimit
lytedev:headscale-basedomain
lytedev:ssd-fast-tier
lytedev:hold-impermanence-flip
lytedev:gate-dummy-eval
lytedev:zen-browser
lytedev:initrd-remote-unlock
lytedev:beefcake-rpool-backup
lytedev:sec-sso-plan
lytedev:sec-mail
lytedev:flab-lid-wake
lytedev:hearth-k8s
lytedev:zulip
lytedev:router-guest-vlan
lytedev:headscale-extra-records
lytedev:beefcake-advertise-lan
lytedev:push-qrvuuqmxtznv
lytedev:voxtype-per-host-model
lytedev:cleanup
lytedev:push-kanidm-opt-in
lytedev:push-voxtype-flake-fix
lytedev:push-uvqqknxvqlvy
lytedev:push-qrqsxkmlrevert
lytedev:fix-kanidm-uid-attr-map
lytedev:nix-on-droid
lytedev:self-hosted-dns
lytedev:fix-runner-tmpfs-revert
lytedev:beefcake-email
lytedev:beefcake-immich
lytedev:firefox-nightly-devedition
lytedev:fix-bun-baseline
lytedev:flab-stuff
lytedev:printer-sftp
lytedev:dragon-vr-monado
lytedev:clever-vr-game-clamshell-mode-detection
lytedev:wireguard-mesh
lytedev:rescue-beefcake-unpushed-nix
No reviewers
Labels
No labels
bug
enhancement
question
scary
upstream
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".
No due date set.
Dependencies
No dependencies set
Reference
lytedev/nix!1630
Loading…
Reference in a new issue
No description provided.
Delete branch "propose/private-query-handoff-purpose"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
See the commits.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.