functionalities such as,
e.g., Entra ID authentication and DiskANN indexing algorithm, which help improve
security and performance when working with large datasets.
## Tooling
For this project
1482mo agoReviewMountCreate a free account to mount
tasks and avoid manual interventions.
- Write modular, reusable CI/CD pipelines.
- Use containerized applications with secure registries.
- Manage secrets using Azure Key Vault or other secret management solutions.
- Build resilient systems
14618mo agoReviewMountCreate a free account to mount
MSTest.
- Use Moq or NSubstitute for mocking dependencies.
- Implement integration tests for API endpoints.
## Security
- Use Authentication and Authorization middleware.
- Implement JWT authentication for stateless API authentication.
- Use HTTPS
14618mo agoReviewMountCreate a free account to mount
processing with @Async for non-blocking operations.
- Implement proper database indexing and query optimization.
## Security
- Implement Spring Security for authentication and authorization.
- Use proper password encoding (e.g., BCrypt).
- Implement CORS
14618mo agoReviewMountCreate a free account to mount
Implementa indexación apropiada de base de datos y optimización de consultas.
## Seguridad
- Implementa Spring Security para autenticación y autorización.
- Usa codificación apropiada de contraseñas (ej., BCrypt).
- Implementa configuración CORS cuando
14618mo agoReviewMountCreate a free account to mount
indexation de base de données appropriée et l'optimisation des requêtes.
## Sécurité
- Implémentez Spring Security pour l'authentification et l'autorisation.
- Utilisez un encodage de mot de passe approprié
14618mo agoReviewMountCreate a free account to mount
Implemente indexação adequada de banco de dados e otimização de consultas.
## Segurança
- Implemente Spring Security para autenticação e autorização.
- Use codificação adequada de senha (ex: BCrypt).
- Implemente configuração CORS quando
14618mo agoReviewMountCreate a free account to mount
require **one approving review**.
- The only **required** status checks are `license/cla` and `GitGuardian Security Checks`.
Every other check is advisory and does not block merge — but do not merge past
1442mo agoReviewMountCreate a free account to mount
reference dependencies via the `libs.*` version catalog.
- Check for security advisories before adding new libraries.
- Keep Jackson as `compileOnly` where it is already `compileOnly` — it must not become a transitive
14412mo agoReviewMountCreate a free account to mount
bubblewrap, paired with a local HTTP CONNECT proxy and `gh`/`git` command guards.
## Core security invariants
- **Hostile filesystem boundary.** `cplt` runs outside the sandbox. Treat every path the sandboxed agent
14432d agoReviewMountCreate a free account to mount
distros using matrix strategy
- **Release**: [`.github/workflows/release.yml`](../.github/workflows/release.yml) publishes to Ansible Galaxy on GitHub release
- **Security**: Tests run with `pull_request_target` and require manual approval of the "PR Tests" environment
14222mo agoReviewMountCreate a free account to mount
Wildbox Security Platform - AI Agent Instructions
**Version:** 1.0 | **Last Updated:** October 2025
## 🏗️ Architecture Overview
Wildbox is a microservices-based security operations platform: ten services and an optional
1345mo agoReviewMountCreate a free account to mount
root — it is the single source of truth for
architecture, commands, conventions, and the security rules that apply to AI agents in this
repository.
Subsystem detail lives in nested files
1333mo agoReviewMountCreate a free account to mount
singlesource of truth for agent behavior.
Default user-facing communication mode: `$caveman full` unless security, irreversible actions, or user confusion require normal clarity.
Client-state diagnosis from uploaded logs: `Resources/skills/diagnose-client-state/SKILL.md
13116d agoReviewMountCreate a free account to mount
regression tests for behavior that can be exercised deterministically.
Use these severities:
- `P0`: immediate security compromise, destructive data loss, or universally
broken release.
- `P1`: likely user-facing defect, hang, major
1314mo agoReviewMountCreate a free account to mount