import os
import sys
def generate_markdown() -> str:
return """# Compatibility Matrix: Agents, Platforms, and Tiers
This matrix documents the verified isolation levels, platform primitives, and feature support across AI coding agents supervised by `vetto`.
---
## 1. Host Platform & Isolation Tiers
| Platform | Tier Classification | Kernel Primitives | Secret Isolation | Network Controls | Process Tree Cleanup |
|---|---|---|---|---|---|
| **Linux x86_64** (Kernel >= 5.13) | **Tier 1 (Production - FULL)** | Landlock (ABI 1–6), unprivileged userns, PID/net namespaces, seccomp-BPF | Empty tmpfs & `/dev/null` bind-mount overlays | Broker relay with domain/port strict allowlist | PID namespace init reaps all descendants |
| **Linux aarch64** (Kernel >= 5.13) | **Tier 1 (Production - FULL)** | Landlock (ABI 1–6), unprivileged userns, PID/net namespaces, seccomp-BPF | Empty tmpfs & `/dev/null` bind-mount overlays | Broker relay with domain/port strict allowlist | PID namespace init reaps all descendants |
| **Linux (Legacy/Restricted)** | **Tier 1 (Fallback - FS-ONLY)** | Landlock (ABI 1–6), seccomp-BPF (userns disabled) | Read allowlist carve-out (fail-closed) | Disabled by default (fail-closed for relay) | `PR_SET_PDEATHSIG` + Process Group |
| **macOS Apple Silicon** (macOS 14+) | **Tier 2 (Experimental - Darwin)** | `sandbox-exec` / Seatbelt (write-isolation), FSEvents | Seatbelt path deny rules for credentials (no VFS overlay) | Loopback restriction / `--net=off` static deny (no netns) | Child process tree termination via kqueue watchdog |
| **macOS Intel** (macOS 14+) | **Tier 2 (Experimental - Darwin)** | `sandbox-exec` / Seatbelt (write-isolation), FSEvents | Seatbelt path deny rules for credentials (no VFS overlay) | Loopback restriction / `--net=off` static deny (no netns) | Child process tree termination via kqueue watchdog |
| **Windows 11 x86_64** | **Tier 3 (Preview - AppContainer)** | AppContainer, Low-Integrity Token, Job Object kill-on-close | Token ACL isolation & deny SID rules (no VFS overlay) | Host broker relay with Windows Firewall / AppContainer caps | Job Object `JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE` |
---
## 2. AI Coding Agents Compatibility
| Agent Name | Preset Flag | Tested Execution Method | Secret Masking | Network Broker | PTY Statusline | Verify Battery |
|---|---|---|---|---|---|---|
| **Claude Code** | `--agent claude` | `claude -p "..."` / `npx @anthropic-ai/claude-code` | ✅ Verified | ✅ `--net=allowlist:api.anthropic.com` | ✅ Full TUI & Statusline | ✅ 100% Pass |
| **OpenAI Codex** | `--agent codex` | `codex exec "..."` | ✅ Verified | ✅ `--net=allowlist:api.openai.com` | ✅ Full TUI & Statusline | ✅ 100% Pass |
| **Cursor Agent** | `--agent cursor` | `cursor-agent "..."` | ✅ Verified | ✅ Allowlisted API targets | ✅ Statusline | ✅ 100% Pass |
| **Cline** | `--agent cline` | `cline --prompt "..."` | ✅ Verified | ✅ Allowlisted API targets | ✅ Statusline | ✅ 100% Pass |
| **Aider** | `--agent aider` | `aider --message "..."` | ✅ Verified | ✅ Allowlisted API targets | ✅ Full PTY | ✅ 100% Pass |
| **GitHub Copilot** | `--agent copilot` | `copilot "..."` | ✅ Verified | ✅ Allowlisted GitHub endpoints | ✅ Statusline | ✅ 100% Pass |
| **OpenCode** | `--agent opencode` | `opencode "..."` | ✅ Verified | ✅ Allowlisted model endpoints | ✅ Statusline | ✅ 100% Pass |
| **Custom Agent / Shell** | (Default) | `vetto -- <command> [args...]` | ✅ Strict-Wins | ✅ Mode-dependent | ✅ Configurable | ✅ 100% Pass |
---
## 3. Sandboxing Feature Support by Tier
| Capability | Linux Tier 1 (FULL) | Linux Tier 1 (FS-ONLY) | macOS Tier 2 (Seatbelt) | Windows Tier 3 (AppContainer) |
|---|:---:|:---:|:---:|:---:|
| **Filesystem Write Protection** | ✅ Hard Inode Enforced | ✅ Hard Inode Enforced | ✅ Sandbox-exec Policy | ✅ Access Control Token |
| **Secret File Overlays (`.env`)** | ✅ Masked with tmpfs | ⚠️ Read-carveout | ⚠️ Path-deny rules (no VFS overlay) | ⚠️ Capability ACL (no overlay) |
| **Network Isolation (`--net=off`)** | ✅ Isolated Netns | ✅ Seccomp socket block | ✅ Deny network rule | ✅ AppContainer network cap |
| **Domain Allowlist Broker** | ✅ Unix Bridge Relay | ❌ (Requires Tier 1 FULL) | ⚠️ Fail-closed / Off (no Darwin netns) | ⚠️ Local Broker / WSL2 recommended |
| **Cross-Process `ptrace` Block** | ✅ Seccomp-BPF | ✅ Seccomp-BPF | ✅ Hardened Runtime | ✅ Restricted Token |
| **Post-Session Audit Reports** | ✅ HTML/MD/JSON/SARIF | ✅ HTML/MD/JSON/SARIF | ✅ HTML/MD/JSON/SARIF | ✅ HTML/MD/JSON/SARIF |
| **Mathematical Preflight (`verify`)**| ✅ Throwaway Sandbox | ✅ Throwaway Sandbox | ✅ Throwaway Sandbox | ⚠️ Capability Probe |
| **Session Rescue & Rollback** | ✅ Full Support | ✅ Full Support | ✅ Full Support | ✅ Full Support |
---
*This document is automatically verified and updated by CI.*
"""
def main():
target_path = os.path.join(os.path.dirname(__file__), "..", "docs", "compat.md")
content = generate_markdown()
with open(target_path, "w", encoding="utf-8") as f:
f.write(content)
print(f"Generated {target_path} successfully.")
if __name__ == "__main__":
main()