icebox-gov 0.1.0

Runtime governance for autonomous offensive security — the single seam every human operator, REST client, and LLM agent must pass through before anything touches a target.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

# SDK: C ABI

The `libicebox` shared library is the lowest-level integration surface.
It is what the Rust and Python SDKs wrap, and you can call it
directly from any FFI-capable language.

## Functions

| Symbol | Signature | Purpose |
| --- | --- | --- |
| `icebox_govern` | `extern "C" icebox_govern(*const c_char) -> *mut c_void` | Build a `GovernanceRuntime` from a JSON config. Returns an opaque handle. |
| `icebox_check` | `icebox_check(handle, *const c_char) -> *mut c_char` | Supervised evaluation of a JSON task. Returns a JSON outcome. |
| `icebox_check_auto` | `icebox_check_auto(handle, *const c_char) -> *mut c_char` | Unsupervised evaluation; approval-gated tasks auto-granted. |
| `icebox_approve` | `icebox_approve(handle, u64) -> bool` | Approve a pending request by id. |
| `icebox_deny` | `icebox_deny(handle, u64) -> bool` | Deny a pending request by id. |
| `icebox_pending` | `icebox_pending(handle) -> *mut c_char` | JSON list of pending approval requests. |
| `icebox_audit_json` | `icebox_audit_json(handle) -> *mut c_char` | Full audit trail as JSON. |
| `icebox_audit_csv` | `icebox_audit_csv(handle) -> *mut c_char` | Full audit trail as CSV. |
| `icebox_free_string` | `icebox_free_string(*mut c_void)` | Free a string returned by the API. |
| `icebox_free_handle` | `icebox_free_handle(*mut c_void)` | Free a runtime handle. |

All returned `*mut c_char` strings are owned by the caller and must be
freed with `icebox_free_string`.

## Build the library

```sh
cargo build --release     # -> target/release/libicebox.{so,dylib,dll}
```

## Config / task shape

```json
{ "charter": {"accepted": true, "engagement": "demo", "rules_of_engagement": []},
  "scope": {"allow": ["10.0.0.0/24"]},
  "max_risk": "high" }
```

The task object requires `name`, `target`, `capabilities`, `impact`, and
`destructive`; `options` is a string-to-string map passed through to the module.

```json
{ "name": "scan",
  "target": "10.0.0.5",
  "capabilities": ["network_scan"],
  "impact": "low",
  "destructive": false,
  "options": { "host": "10.0.0.5", "ports": "1-1024" } }

The `cvss` field is optional and may be a bare number (`"cvss": 9.5`) or a
structured object (`"cvss": {"cvss_v31": 9.5, "epss": 0.9, "kev": true}`).
Policies such as `deny_if_cvss_above` consult it.
```