security-attestation.md¶
- baseline_version: v1
- last_attested: 2026-06-12
- approver: local-agent egress audit (scripts/audit_egress.sh)
- model: qwen3.5
- overall: PARTIAL
Evaluations¶
| Control | Result | Evidence |
|---|---|---|
| SPB-10 | pass | local runtime; model=qwen3.5 |
| SPB-11 | partial | A: model=qwen3.5; env+perms locked; B: needs sudo (run: sudo -E ./scripts/audit_egress.sh); C: needs macOS + sudo + tcpdump |
| SPB-12 | pass | audit/egress-audit-log.md (append-only) |
| SPB-13 | partial | this attestation, 2026-06-12T04:43:08Z |
Egress audit layers¶
| Layer | What it proves | Result | Detail |
|---|---|---|---|
| A — config attestation | model local; env + permissions lock egress | PASS | model=qwen3.5; env+perms locked |
| B — deny-egress functional proof | capture works with non-loopback egress blocked | SKIPPED | needs sudo (run: sudo -E ./scripts/audit_egress.sh) |
| C — recorded-connections | no non-loopback endpoints during a run | SKIPPED | needs macOS + sudo + tcpdump |
Controlling-file hashes (sha256)¶
| File | Hash |
|---|---|
| chat | 3b8202b963bc95b5fb6cc3c502f229be3c91b5335d738fbd71db38df41beec7a |
| scripts/privacy_env.sh | b62416d7c352d231d3ace4d969664ed64fac1f64f3950675fbff29de9005052e |
| .claude/settings.json | 66c041ee8831ebc5c434d7f36598e81cbab3eec0313f456f11b9a669e75a0979 |
| .claude/skills/local-agent-capture/SKILL.md | cf2e04c538444a5695bb9d09f182298b067c68130280ead7e3c9a56a18235a62 |
Notes¶
- Audit covers the inference/capture session. Model pulls and Ollama update checks happen out-of-band beforehand and are outside the audited window.
- Layers reporting SKIPPED were not runnable in this environment (missing sudo / ollama / tcpdump); SKIPPED is not PASS.