TayHCode/tailscale-agent-access

No problems traced to this repository code in these checks.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

macos behavior observation needs an OS-native file/network/process collector; only the static scan ran.

No Linux syscall trace was collected.

Full safety evidence →

• The summary reports each configured agent's grant preset.: Real input produced the expected result: Everything preset: grants all IP traffic to all destinations.

  Source: An offline tool for reviewing and generating Tailscale grants for `agent-a`, `agent-b`, and `agent-c`.

  Input: checked-in policy.json

  Expected: agent-a summary shows Everything preset

  Command: /opt/homebrew/bin/python3 agent_access.py summary

  Observed: Everything preset: grants all IP traffic to all destinations. agent-b (tag:agent-agent-b) Everything preset: grants all IP traffic to all destinations. agent-c (tag:agent-agent-c) Everything preset: grants all IP traffic to all destinations.

Examples

• Validate the policy and generate a grant fragment.: command completed successfully

  Source: README.md / Quickstart

  Input: checked-in policy.json

  Expected: valid policy and generated JSON fragment

  Command: /bin/bash -c '/opt/homebrew/bin/python3 agent_access.py validate && /opt/homebrew/bin/python3 agent_access.py generate --output <guest-path>'

  Observed: Policy is valid.

Local or hosted: local

Summarize configured Tailscale grants

pwd && ls -la && (vault-search 'tailscale-agent-access README setup MCP probe' || true) && cat ~/.agents/skills/i-have-adhd/SKILL.md && cat ~/.agents/skills/ponytail/SKILL.md && cat ~/.agents/skills/p3-mode/SKILL.md && cat README.md
cat README.md; /opt/homebrew/bin/python3 --version; git status --short; git log -1 --oneline; rg --files
python3 agent_access.py summary
python3 agent_access.py validate && python3 agent_access.py generate --output <guest-path>; cat <guest-path>
mkdir -p .coldpass; cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["/opt/homebrew/bin/python3","agent_access.py","summary"],"cwd":"<guest-path>","expected_text":"agent-a (tag:agent-agent-a)"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"The summary reports each configured agent's grant preset.","source":"An offline tool for reviewing and generating Tailscale grants for `agent-a`, `agent-b`, and `agent-c`.","input":"checked-in policy.json","expected":"agent-a summary shows Everything preset","probe_kind":"cli","argv":["/opt/homebrew/bin/python3","agent_access.py","summary"],"expected_text":"Everything preset: grants all IP traffic to all destinations.","cwd":"<guest-path>"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Validate the policy and generate a grant fragment.","source":"README.md / Quickstart","input":"checked-in policy.json","expected":"valid policy and generated JSON fragment","argv":["/bin/bash","-c","/opt/homebrew/bin/python3 agent_access.py validate && /opt/homebrew/bin/python3 agent_access.py generate --output <guest-path>"],"cwd":"<guest-path>","expected_text":"Policy is valid."}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README Quickstart and agent_access.py entry points; this offline CLI performs explicitly invoked summary, validation, generation, and diff operations, with no scheduler or recurring cycle.","checks":[]}
EOF
COLDPASS_WORKSPACE=<guest-path> /opt/homebrew/bin/python3 -I <guest-path> --validate --replay
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Summarize configured Tailscale grants","operation_scope":"Offline policy review using the checked-in policy; Python 3.10+ (Python 3.14.8 available), no packages or network access","steps":["Read README Quickstart.","Ran /opt/homebrew/bin/python3 agent_access.py summary.","Ran /opt/homebrew/bin/python3 agent_access.py validate.","Ran /opt/homebrew/bin/python3 agent_access.py generate --output <guest-path>","Validated and replayed probe, README claim, example, and cycle record successfully."],"deviations":["vault-search and global skill files were unavailable in the VM; repository work proceeded from its README."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF

No problems traced to this repository code in these checks.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

windows behavior observation needs an OS-native file/network/process collector; only the static scan ran.

No Linux syscall trace was collected.

Full safety evidence →

• The generator emits a Tailscale policy fragment with tagOwners, source tags, grants, and scoped-access tests.: Real input produced the expected result: "tag:agent-agent-a"

  Source: The generator emits a Tailscale policy fragment with

  Input: checked-in policy.json

  Expected: tagOwners, source tags, grants, and scoped-access tests

  Command: 'C:\coldpass\python\python.exe' agent_access.py generate --output 'C:\coldpass\workspace\generated-fragment.hujson-checker-9780c4bf5f1c44ed9302bec0eaa16138'

  Observed: "tag:agent-agent-a": [ "autogroup:admin" ], "tag:agent-agent-b": [ "autogroup:admin" ], "tag:agent-agent-c": [ "autogroup:admin" ] }, "grants": [ { "src": [ "tag:agent-agent-a" ], "dst": [ "*" ], "ip": [ "*" ] }, { "src": [ "tag:agent-agent-b" ], "dst": [ "*" ], "ip": [ "*" ] }, { "src": [ "tag:agent-agent-c" ], "dst": [ "*" ], "i

Examples

• Generate a policy fragment using the documented quickstart command.: command completed successfully

  Source: README.md, Quickstart

  Input: checked-in policy.json

  Expected: generated fragment includes grants

  Command: 'C:\coldpass\python\python.exe' agent_access.py generate --output 'C:\coldpass\workspace\example-fragment.hujson-checker-2f654ed3ec71437fbd45066edfe40a6f'

  Observed: "tag:agent-agent-b": [ "autogroup:admin" ], "tag:agent-agent-c": [ "autogroup:admin" ] }, "grants": [ { "src": [ "tag:agent-agent-a" ], "dst": [ "*" ], "ip": [ "*" ] }, { "src": [ "tag:agent-agent-b" ], "dst": [ "*" ], "ip": [ "*" ] }, { "src": [ "tag:agent-agent-c" ], "dst": [ "*" ], "ip": [ "*" ] } ], "tests": [] }

Local or hosted: local

Generate an offline Tailscale policy fragment from the checked-in policy.

Get-ChildItem -Force; Get-Content README.md; git status --short --branch
& C:\coldpass\python\python.exe --version; Get-Content agent_access.py; Get-Content .github\workflows\*;
$env:COLDPASS_WORKSPACE='C:\coldpass\workspace'; & C:\coldpass\python\python.exe agent_access.py summary; & C:\coldpass\python\python.exe agent_access.py generate --output C:\coldpass\workspace\generated-fragment.hujson; Get-Content C:\coldpass\workspace\generated-fragment.hujson -Raw; Get-ChildItem C:\coldpass\checker;
$base='C:\coldpass\workspace'; $dir=Join-Path $base '.coldpass'; New-Item -ItemType Directory -Force $dir | Out-Null; if (Test-Path (Join-Path $base 'generated-fragment.hujson')) { Remove-Item (Join-Path $base 'generated-fragment.hujson') }; $utf8=New-Object System.Text.UTF8Encoding($false); $content=(& C:\coldpass\python\python.exe agent_access.py generate --output generated-fragment.hujson); $actual=[System.IO.File]::ReadAllText((Join-Path $base 'generated-fragment.hujson'),[System.Text.Encoding]::UTF8); $probe=@{kind='cli';argv=@('C:\coldpass\python\python.exe','agent_access.py','generate','--output','C:\coldpass\workspace\generated-fragment.hujson');cwd=$base;expected_file='C:\coldpass\workspace\generated-fragment.hujson';expected_text='"tag:agent-agent-a"'} | ConvertTo-Json -Depth 8; [IO.File]::WriteAllText((Join-Path $dir 'probe.json'),$probe,$utf8); $claim=@(@{kind='claim';claim='The generator emits a Tailscale policy fragment with tagOwners, source tags, grants, and scoped-access tests.';source='The generator emits a Tailscale policy fragment with';input='checked-in policy.json';expected='tagOwners, source tags, grants, and scoped-access tests';probe_kind='cli';argv=@('C:\coldpass\python\python.exe','agent_access.py','generate','--output','C:\coldpass\workspace\generated-fragment.hujson');expected_file='C:\coldpass\workspace\generated-fragment.hujson';expected_text='"tag:agent-agent-a"';cwd=$base}); [IO.File]::WriteAllText((Join-Path $dir 'claims.json'),(ConvertTo-Json -InputObject $claim -Depth 8),$utf8); [IO.File]::WriteAllText((Join-Path $dir 'cycles.json'),'{"detected":false,"reason":"Inspected README and agent_access.py entry points: the CLI offers validate, generate/render, summary, and diff; no product scheduler, loop, or webhook cycle exists.","checks":[]}',$utf8); $examples=@(@{kind='example';claim='Generate a policy fragment using the documented quickstart command.';source='README.md, Quickstart';input='checked-in policy.json';expected='generated fragment includes grants';argv=@('C:\coldpass\python\python.exe','agent_access.py','generate','--output','C:\coldpass\workspace\example-fragment.hujson');cwd=$base;env=@{};expected_file='C:\coldpass\workspace\example-fragment.hujson';expected_text='"tag:agent-agent-a"'}); [IO.File]::WriteAllText((Join-Path $dir 'examples.json'),(ConvertTo-Json -InputObject $examples -Depth 8),$utf8); if(Test-Path (Join-Path $base 'example-fragment.hujson')){Remove-Item (Join-Path $base 'example-fragment.hujson')}; $env:COLDPASS_WORKSPACE=$base; & C:\coldpass\python\python.exe -I C:\coldpass\checker\check.py --validate --replay
$dir='C:\coldpass\workspace\.coldpass'; $report=@{outcome='working';fault_owner=$null;operation='Generate an offline Tailscale policy fragment from the checked-in policy.';operation_scope='Python 3.10+ CLI; ran under Python 3.14.0. The tool does not connect to Tailscale.';steps=@('Read README.md Quickstart and inspected CLI entry points.','Ran python agent_access.py summary.','Ran python agent_access.py generate --output generated-fragment.hujson and observed tagOwners and grants.','Validated and replayed .coldpass evidence with the supplied checker.');deviations=@();stuck_step=$null;main_blocker=$null;plain_failure=$null;suggested_fix=$null} | ConvertTo-Json -Depth 8; [IO.File]::WriteAllText((Join-Path $dir 'report.json'),$report,(New-Object System.Text.UTF8Encoding($false))); Get-Content (Join-Path $dir 'probe.json'); Get-Content (Join-Path $dir 'report.json')

No problems traced to this repository code in these checks.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• The summary describes the starter policy grants.: Real input produced the expected result: agent-a (tag:agent-agent-a)

  Source: Each agent has a `preset`: `everything` grants all IP traffic to all destinations, and `scoped` uses that agent's `allow` entries.

  Input: checked-in policy.json

  Expected: agent-a uses the everything preset and grants all IP traffic to all destinations

  Command: python3 agent_access.py summary

  Observed: agent-a (tag:agent-agent-a) Everything preset: grants all IP traffic to all destinations. agent-b (tag:agent-agent-b) Everything preset: grants all IP traffic to all destinations. agent-c (tag:agent-agent-c) Everything preset: grants all IP traffic to all destinations.

Examples

• Validate the checked-in policy: command completed successfully

  Source: README.md / Quickstart

  Input: policy.json

  Expected: Policy is valid.

  Command: python3 agent_access.py validate

  Observed: Policy is valid.

• Generate a Tailscale policy fragment: command completed successfully with no output

  Source: README.md / Quickstart

  Input: checked-in policy.json

  Expected: Generated fragment contains tagOwners and grants

  Command: python3 agent_access.py generate --output <guest-path>

Local or hosted: local

Summarize, validate, and generate an offline Tailscale grant policy fragment

pwd && ls -la && rg --files -g 'README*' -g 'AGENTS.md' -g 'pyproject.toml' -g 'package.json' -g 'Makefile' -g '*.yml' -g '*.yaml' | head -80
cat README.md && python3 --version && python3 -m pip --version && find . -name AGENTS.md -o -name '*.py' | head -60
python3 agent_access.py summary && python3 agent_access.py validate && python3 agent_access.py generate --output <guest-path> && cat <guest-path> && git status --short
mkdir -p .coldpass && rm -f .coldpass/manual-fragment.hujson && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["python3","agent_access.py","summary"],"cwd":"<guest-path>","expected_text":"agent-a (tag:agent-agent-a)"}
EOF
cat > .coldpass/claims.json <<'EOF'
[
  {
    "kind": "claim",
    "claim": "The summary describes the starter policy grants.",
    "source": "Each agent has a `preset`: `everything` grants all IP traffic to all destinations, and `scoped` uses that agent's `allow` entries.",
    "input": "checked-in policy.json",
    "expected": "agent-a uses the everything preset and grants all IP traffic to all destinations",
    "probe_kind": "cli",
    "argv": ["python3", "agent_access.py", "summary"],
    "expected_text": "agent-a (tag:agent-agent-a)",
    "cwd": "<guest-path>"
  }
]
EOF
cat > .coldpass/examples.json <<'EOF'
[
  {"kind":"example","claim":"Validate the checked-in policy","source":"README.md / Quickstart","input":"policy.json","expected":"Policy is valid.","argv":["python3","agent_access.py","validate"],"cwd":"<guest-path>","expected_text":"Policy is valid."},
  {"kind":"example","claim":"Generate a Tailscale policy fragment","source":"README.md / Quickstart","input":"checked-in policy.json","expected":"Generated fragment contains tagOwners and grants","argv":["python3","agent_access.py","generate","--output","<guest-path>"],"cwd":"<guest-path>","expected_text":""}
]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README.md and agent_access.py entry points: this is a finite offline CLI with summary, validate, diff, and generate commands; it has no scheduler, recurring loop, webhook, or cycle trigger.","checks":[]}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Summarize, validate, and generate an offline Tailscale grant policy fragment","operation_scope":"Python 3.12.3; checked-in policy.json; no third-party dependencies","steps":["python3 agent_access.py summary","python3 agent_access.py validate","python3 agent_access.py generate --output <guest-path>"],"deviations":["The supplied snapshot has no .git directory; an attempted git status returned fatal: not a git repository. Git metadata was not needed for the README operations.","python3 -m pip --version returned /usr/bin/python3: No module named pip; no installation was needed because the README requires no packages or network access."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
rm -f .coldpass/manual-fragment.hujson
COLDPASS_WORKSPACE=<guest-path> python3 -I <guest-path> --validate --replay

No problems traced to this repository code in these checks.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

windows behavior observation needs an OS-native file/network/process collector; only the static scan ran.

No Linux syscall trace was collected.

Full safety evidence →

• Validate the policy with the documented command: Real input produced the expected result: Policy is valid.

  Source: Run `python3 agent_access.py validate`

  Input: policy.json (default policy)

  Expected: Policy is valid.

  Command: 'C:\coldpass\python\python.exe' agent_access.py validate

  Observed: Policy is valid.

• The everything preset generates a grant with destination * and ip *: Real input produced the expected result: "tag:agent-agent-b"

  Source: The `everything` preset generates a grant with destination `*` and IP protocol/port `*`.

  Input: default policy, generate to a fresh file

  Expected: fragment file contains tag owner for agent-b

  Command: 'C:\coldpass\python\python.exe' agent_access.py generate --output '.coldpass\out\claim-fragment.hujson-checker-8f812d06e5c9409ba093d30bb336aeed'

  Observed: "tag:agent-agent-b": [ "autogroup:admin" ], "tag:agent-agent-c": [ "autogroup:admin" ] }, "grants": [ { "src": [ "tag:agent-agent-a" ], "dst": [ "*" ], "ip": [ "*" ] }, { "src": [ "tag:agent-agent-b" ], "dst": [ "*" ], "ip": [ "*" ] }, { "src": [ "tag:agent-agent-c" ], "dst": [ "*" ], "ip": [ "*" ] } ], "tests": [] }

• diff compares generated grants with the existing policy grants and prints additions: Real input produced the expected result: Added grants:

  Source: it compares generated grants with the existing policy's `grants` array and prints additions and removals.

  Input: existing policy with empty grants array

  Expected: Added grants: listing three agent grants

  Command: 'C:\coldpass\python\python.exe' agent_access.py diff --against '.coldpass\existing-policy.json'

  Observed: Added grants: + {"dst":["*"],"ip":["*"],"src":["tag:agent-agent-a"]} + {"dst":["*"],"ip":["*"],"src":["tag:agent-agent-b"]} + {"dst":["*"],"ip":["*"],"src":["tag:agent-agent-c"]} Removed grants: (none)

Examples

• Quickstart: summary of agent grants: command completed successfully

  Source: README.md Quickstart (python3 agent_access.py summary)

  Input: summary

  Expected: Agent Tailscale grants summary for agent-a, agent-b, agent-c

  Command: 'C:\coldpass\python\python.exe' agent_access.py summary

  Observed: ed. A range grants the listed TCP/UDP flows to every address it covers; service labels do not restrict destinations. Scoped mode does not model or test ICMP; the everything preset grants all IP traffic, including ICMP. This fragment does not revoke credentials, host permissions, or access provided elsewhere. agent-a (tag:agent-agent-a) Everything preset: grants all IP traffic to all destinations. agent-b (tag:agent-agent-b) Everything preset: grants all IP traffic to all destinations. agent-c (tag:agent-agent-c) Everything preset: grants all IP traffic to all destinations.

• Repository unit tests (CI/release check command, not in README): command completed successfully

  Source: release-check.json checks[0]

  Input: python -m unittest discover -s tests

  Expected: All 35 tests pass (exit 0)

  Command: 'C:\coldpass\python\python.exe' -m unittest discover -s tests

  Observed: ................................... ---------------------------------------------------------------------- Ran 35 tests in 21.703s OK

Local or hosted: local

Generate a Tailscale policy fragment (tagOwners, grants, tests) for agent-a, agent-b, agent-c, plus validate, summary, and diff

cd C:\coldpass\workspace; Get-ChildItem -Force | Select-Object Name; Write-Output '---'; Get-Content README.md -TotalCount 200; Write-Output '---'; C:\coldpass\python\python.exe --version; git --version 2>&1; node --version 2>&1; whoami
cd C:\coldpass\workspace; Get-ChildItem -Force .coldpass,.github,tests | Select-Object FullName; Write-Output '---policy'; Get-Content policy.json -Raw; Write-Output '---release'; Get-Content release-check.json -Raw; Write-Output '---ci'; Get-ChildItem .github -Recurse | Select-Object FullName
cd C:\coldpass\workspace; & C:\coldpass\python\python.exe agent_access.py validate; Write-Output "rc=$LASTEXITCODE"; & C:\coldpass\python\python.exe agent_access.py summary; Write-Output "rc=$LASTEXITCODE"
cd C:\coldpass\workspace; New-Item -ItemType Directory -Force -Path .coldpass\out | Out-Null; Remove-Item -Force -ErrorAction SilentlyContinue .coldpass\out\generated-fragment.hujson; & C:\coldpass\python\python.exe agent_access.py generate --output .coldpass\out\generated-fragment.hujson; Write-Output "rc=$LASTEXITCODE"; Get-Content .coldpass\out\generated-fragment.hujson -Raw; Write-Output '--- tests'; & C:\coldpass\python\python.exe -m unittest discover -s tests 2>&1 | Select-Object -Last 5; Write-Output "rc=$LASTEXITCODE"
cd C:\coldpass\workspace; Select-String -Path agent_access.py,README.md,CONTRIBUTING.md -Pattern 'cron|schedule|loop|webhook|--once|--now|sleep|daemon|while ' | ForEach-Object { $_.Filename + ':' + $_.LineNumber + ': ' + $_.Line }; Write-Output '--- argparse'; Select-String -Path agent_access.py -Pattern 'add_parser|add_argument' | ForEach-Object { $_.Line }; Write-Output '--- diff'; '{"version":1,"grants":[]}' | Set-Content -Encoding UTF8 .coldpass\out\existing-policy.json; & C:\coldpass\python\python.exe agent_access.py diff --against .coldpass\out\existing-policy.json; Write-Output "rc=$LASTEXITCODE"
cd C:\coldpass\workspace; [IO.File]::WriteAllText((Join-Path (Get-Location) '.coldpass\out\existing-policy.json'), '{"version":1,"grants":[]}'); & C:\coldpass\python\python.exe agent_access.py diff --against .coldpass\out\existing-policy.json; Write-Output "rc=$LASTEXITCODE"
cd C:\coldpass\workspace; Remove-Item -Force .coldpass\out\existing-policy.json, .coldpass\out\generated-fragment.hujson -ErrorAction SilentlyContinue; $enc = New-Object System.Text.UTF8Encoding($false); $ws = (Get-Location).Path; $py = 'C:\\coldpass\\python\\python.exe'
[IO.File]::WriteAllText("$ws\.coldpass\existing-policy.json", '{"version":1,"grants":[]}', $enc)
$probe = @"
{
  "kind": "cli",
  "argv": ["$py", "agent_access.py", "generate", "--output", ".coldpass\\out\\probe-fragment.hujson"],
  "cwd": "C:\\coldpass\\workspace",
  "expected_file": ".coldpass\\out\\probe-fragment.hujson",
  "expected_text": "\"tag:agent-agent-a\""
}
"@
[IO.File]::WriteAllText("$ws\.coldpass\probe.json", $probe, $enc)
$claims = @"
[
  {
    "kind": "claim",
    "claim": "Validate the policy with the documented command",
    "source": "Run `python3 agent_access.py validate`",
    "input": "policy.json (default policy)",
    "expected": "Policy is valid.",
    "probe_kind": "cli",
    "argv": ["$py", "agent_access.py", "validate"],
    "expected_text": "Policy is valid.",
    "cwd": "C:\\coldpass\\workspace"
  },
  {
    "kind": "claim",
    "claim": "The everything preset generates a grant with destination * and ip *",
    "source": "The `everything` preset generates a grant with destination `*` and IP protocol/port `*`.",
    "input": "default policy, generate to a fresh file",
    "expected": "fragment file contains tag owner for agent-b",
    "probe_kind": "cli",
    "argv": ["$py", "agent_access.py", "generate", "--output", ".coldpass\\out\\claim-fragment.hujson"],
    "expected_file": ".coldpass\\out\\claim-fragment.hujson",
    "expected_text": "\"tag:agent-agent-b\"",
    "cwd": "C:\\coldpass\\workspace"
  },
  {
    "kind": "claim",
    "claim": "diff compares generated grants with the existing policy grants and prints additions",
    "source": "it compares generated grants with the existing policy's `grants` array and prints additions and removals.",
    "input": "existing policy with empty grants array",
    "expected": "Added grants: listing three agent grants",
    "probe_kind": "cli",
    "argv": ["$py", "agent_access.py", "diff", "--against", ".coldpass\\existing-policy.json"],
    "expected_text": "Added grants:",
    "cwd": "C:\\coldpass\\workspace"
  }
]
"@
[IO.File]::WriteAllText("$ws\.coldpass\claims.json", $claims, $enc)
$cycles = '{"detected":false,"reason":"Entry points inspected (agent_access.py argparse commands validate, generate, diff, summary, and the legacy grants command; README and CONTRIBUTING.md). No cron, schedule, loop, webhook, --once or --now trigger exists; the tool runs once per command invocation and does not connect to Tailscale.","checks":[]}'
[IO.File]::WriteAllText("$ws\.coldpass\cycles.json", $cycles, $enc)
$examples = @"
[
  {
    "kind": "example",
    "claim": "Quickstart: summary of agent grants",
    "source": "README.md Quickstart (python3 agent_access.py summary)",
    "input": "summary",
    "expected": "Agent Tailscale grants summary for agent-a, agent-b, agent-c",
    "argv": ["$py", "agent_access.py", "summary"],
    "cwd": "C:\\coldpass\\workspace",
    "env": {},
    "expected_text": "Agent Tailscale grants"
  },
  {
    "kind": "example",
    "claim": "Repository unit tests (CI/release check command, not in README)",
    "source": "release-check.json checks[0]",
    "input": "python -m unittest discover -s tests",
    "expected": "All 35 tests pass (exit 0)",
    "argv": ["$py", "-m", "unittest", "discover", "-s", "tests"],
    "cwd": "C:\\coldpass\\workspace",
    "env": {}
  }
]
"@
[IO.File]::WriteAllText("$ws\.coldpass\examples.json", $examples, $enc)
foreach ($f in 'probe.json','claims.json','cycles.json','examples.json') { & $py -I -c "import json,sys; json.load(open(sys.argv[1], encoding='utf-8')); print('ok', sys.argv[1])" ".coldpass\$f" }
cd C:\coldpass\workspace; $enc = New-Object System.Text.UTF8Encoding($false); $ws = (Get-Location).Path
$report = @"
{
  "outcome": "working",
  "fault_owner": null,
  "operation": "Generate a Tailscale policy fragment (tagOwners, grants, tests) for agent-a, agent-b, agent-c, plus validate, summary, and diff",
  "operation_scope": "Offline only; uses bundled Python 3.14 (README needs 3.10+) from C:\\coldpass\\python\\python.exe; no network, no Tailscale connection, no browser, no credentials. Output is a fragment for manual review, not applied.",
  "steps": [
    "python3 agent_access.py validate",
    "python3 agent_access.py summary",
    "python3 agent_access.py generate --output generated-fragment.hujson",
    "python3 agent_access.py diff --against existing-policy.json"
  ],
  "deviations": [
    "python3 is not on PATH in the guest; used the absolute bundled interpreter C:\\coldpass\\python\\python.exe (Python 3.14.0) for every command.",
    "git and node are not installed in the guest; not needed because the product is pure Python with no packages. No git init/fetch was performed.",
    "First diff attempt failed only because my fixture was written with a UTF-8 BOM by Set-Content; rewrote it without BOM and reran (product behaviour unchanged).",
    "README diff example references existing-policy.json; created a fixture at .coldpass\\existing-policy.json with an empty grants array.",
    "Outputs written under .coldpass\\out (fresh paths); the generate --output destinations were not pre-created."
  ],
  "stuck_step": null,
  "main_blocker": null,
  "plain_failure": null,
  "suggested_fix": "None required for the run. Optional: README could say python on Windows, and the diff fixture path is user-supplied."
}
"@
New-Item -ItemType Directory -Force -Path .coldpass | Out-Null
[IO.File]::WriteAllText("$ws\.coldpass\report.json", $report, $enc)
& C:\coldpass\python\python.exe -I -c "import json; json.load(open(r'.coldpass\report.json', encoding='utf-8')); print('report ok')"
$env:COLDPASS_WORKSPACE='C:\coldpass\workspace'; & C:\coldpass\python\python.exe -I C:\coldpass\checker\check.py --validate --replay; Write-Output "checker rc=$LASTEXITCODE"
cd C:\coldpass\workspace; $code = @'
import json
readme = open("README.md", encoding="utf-8").read()
claims = json.load(open(".coldpass/claims.json", encoding="utf-8"))
for c in claims:
    print(repr(c["source"][:60]), c["source"] in readme)
print("README has CRLF:", "\r\n" in readme, "len", len(readme))
'@; $code | Set-Content -Encoding ASCII .coldpass\chk_quotes.py; & C:\coldpass\python\python.exe -I .coldpass\chk_quotes.py; Remove-Item .coldpass\chk_quotes.py; Write-Output '--- checker help'; & C:\coldpass\python\python.exe -I C:\coldpass\checker\check.py --help 2>&1 | Select-Object -First 40
cd C:\coldpass\workspace; $enc = New-Object System.Text.UTF8Encoding($false); $ws = (Get-Location).Path; $py = 'C:\\coldpass\\python\\python.exe'
$claims = @'
[
  {
    "kind": "claim",
    "claim": "Validate the policy with the documented command",
    "source": "Run `python3 agent_access.py validate`",
    "input": "policy.json (default policy)",
    "expected": "Policy is valid.",
    "probe_kind": "cli",
    "argv": ["__PY__", "agent_access.py", "validate"],
    "expected_text": "Policy is valid.",
    "cwd": "C:\\coldpass\\workspace"
  },
  {
    "kind": "claim",
    "claim": "The everything preset generates a grant with destination * and ip *",
    "source": "The `everything` preset generates a grant with destination `*` and IP protocol/port `*`.",
    "input": "default policy, generate to a fresh file",
    "expected": "fragment file contains tag owner for agent-b",
    "probe_kind": "cli",
    "argv": ["__PY__", "agent_access.py", "generate", "--output", ".coldpass\\out\\claim-fragment.hujson"],
    "expected_file": ".coldpass\\out\\claim-fragment.hujson",
    "expected_text": "\"tag:agent-agent-b\"",
    "cwd": "C:\\coldpass\\workspace"
  },
  {
    "kind": "claim",
    "claim": "diff compares generated grants with the existing policy grants and prints additions",
    "source": "it compares generated grants with the existing policy's `grants` array and prints additions and removals.",
    "input": "existing policy with empty grants array",
    "expected": "Added grants: listing three agent grants",
    "probe_kind": "cli",
    "argv": ["__PY__", "agent_access.py", "diff", "--against", ".coldpass\\existing-policy.json"],
    "expected_text": "Added grants:",
    "cwd": "C:\\coldpass\\workspace"
  }
]
'@
$claims = $claims.Replace('__PY__', $py)
[IO.File]::WriteAllText("$ws\.coldpass\claims.json", $claims, $enc)
# also fix probe/examples in case of same issue (no backticks there, but verify)
$code = @'
import json
readme = open("README.md", encoding="utf-8").read()
for c in json.load(open(".coldpass/claims.json", encoding="utf-8")):
    print(c["source"] in readme, c["source"][:50])
'@
Set-Content -Encoding ASCII .coldpass\chk_quotes.py $code; & C:\coldpass\python\python.exe -I .coldpass\chk_quotes.py; Remove-Item .coldpass\chk_quotes.py
$env:COLDPASS_WORKSPACE='C:\coldpass\workspace'; & C:\coldpass\python\python.exe -I C:\coldpass\checker\check.py --validate --replay; Write-Output "checker rc=$LASTEXITCODE"

No problems traced to this repository code in these checks.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Quickstart runs offline with Python 3.10+ and no packages: Real input produced the expected result: agent-a (tag:agent-agent-a)

  Source: Requires Python 3.10 or newer; no packages or network access are needed.

  Input: python3 agent_access.py summary

  Expected: Summary lists agent-a with its tag

  Command: python3 agent_access.py summary

  Observed: agent-a (tag:agent-agent-a) Everything preset: grants all IP traffic to all destinations. agent-b (tag:agent-agent-b) Everything preset: grants all IP traffic to all destinations. agent-c (tag:agent-agent-c) Everything preset: grants all IP traffic to all destinations.

• everything preset grants all IP traffic to all destinations: Real input produced the expected result: Everything preset: grants all IP traffic to all destinations.

  Source: Choose `everything` to grant an agent all IP traffic to all destinations,

  Input: python3 agent_access.py summary (checked-in policy)

  Expected: Each agent shows the everything preset grant

  Command: python3 agent_access.py summary

  Observed: Everything preset: grants all IP traffic to all destinations. agent-b (tag:agent-agent-b) Everything preset: grants all IP traffic to all destinations. agent-c (tag:agent-agent-c) Everything preset: grants all IP traffic to all destinations.

• validate command checks the policy: Real input produced the expected result: Policy is valid.

  Source: Run `python3 agent_access.py validate`

  Input: python3 agent_access.py validate

  Expected: Policy is valid.

  Command: python3 agent_access.py validate

  Observed: Policy is valid.

• scoped preset grants only listed LAN hosts and ports: Real input produced the expected result: Grants access to printer (<internal-ip>) on tcp:631, udp:8000-8010.

  Source: or `scoped` to grant only its listed LAN hosts and ports.

  Input: scoped policy with printer <internal-ip> on tcp:631 and udp:8000-8010

  Expected: Summary states the printer grant on those ports only

  Command: python3 agent_access.py --policy .coldpass/scoped-policy.json summary

  Observed: Grants access to printer (<internal-ip>) on tcp:631, udp:8000-8010. This fragment grants LAN access only to listed addresses or ranges on listed TCP/UDP ports. This fragment grants no access to other agents' Tailscale node addresses. This fragment adds no Internet or exit-node access grant. These network grants do not confer tailnet or user administration authority. These network grants do not confer policy-edit, device-tagging, or network-configuration authority. This fragment adds no unlisted TCP/UDP ports or protocols.

• diff never writes files and prints additions: Real input produced the expected result: Added grants:

  Source: prints additions and removals.

  Input: diff --against policy.json (no grants array)

  Expected: Lists the three everything grants as additions

  Command: python3 agent_access.py diff --against policy.json

  Observed: Added grants: + {"dst":["*"],"ip":["*"],"src":["tag:agent-agent-a"]} + {"dst":["*"],"ip":["*"],"src":["tag:agent-agent-b"]} + {"dst":["*"],"ip":["*"],"src":["tag:agent-agent-c"]} Removed grants: (none)

Examples

• Quickstart summary: command completed successfully

  Source: README.md Quickstart

  Input: summary of checked-in policy

  Expected: Agent Tailscale grants header printed

  Command: python3 agent_access.py summary

  Observed: e not excluded. A range grants the listed TCP/UDP flows to every address it covers; service labels do not restrict destinations. Scoped mode does not model or test ICMP; the everything preset grants all IP traffic, including ICMP. This fragment does not revoke credentials, host permissions, or access provided elsewhere. agent-a (tag:agent-agent-a) Everything preset: grants all IP traffic to all destinations. agent-b (tag:agent-agent-b) Everything preset: grants all IP traffic to all destinations. agent-c (tag:agent-agent-c) Everything preset: grants all IP traffic to all destinations.

• Validate the checked-in policy: command completed successfully

  Source: README.md Quickstart

  Input: validate checked-in policy

  Expected: Policy is valid.

  Command: python3 agent_access.py validate

  Observed: Policy is valid.

• Generate the Tailscale policy fragment to a file: command completed successfully

  Source: README.md Manual application / Quickstart generate

  Input: generate --output .coldpass/example-fragment.hujson

  Expected: Fragment file written with the agent tag

  Command: python3 agent_access.py generate --output .coldpass/example-fragment.hujson-checker-da440cbb22494fe7ae49578061a25167

  Observed: ent-a": [ "autogroup:admin" ], "tag:agent-agent-b": [ "autogroup:admin" ], "tag:agent-agent-c": [ "autogroup:admin" ] }, "grants": [ { "src": [ "tag:agent-agent-a" ], "dst": [ "*" ], "ip": [ "*" ] }, { "src": [ "tag:agent-agent-b" ], "dst": [ "*" ], "ip": [ "*" ] }, { "src": [ "tag:agent-agent-c" ], "dst": [ "*" ], "ip": [ "*" ] } ], "tests": [] }

• Diff against an existing policy without writing: command completed successfully

  Source: README.md Quickstart diff command

  Input: diff --against policy.json

  Expected: Added grants section listed

  Command: python3 agent_access.py diff --against policy.json

  Observed: Added grants: + {"dst":["*"],"ip":["*"],"src":["tag:agent-agent-a"]} + {"dst":["*"],"ip":["*"],"src":["tag:agent-agent-b"]} + {"dst":["*"],"ip":["*"],"src":["tag:agent-agent-c"]} Removed grants: (none)

• Offline unit test suite from release-check: command completed successfully

  Source: CONTRIBUTING.md

  Input: python3 -m unittest discover -s tests

  Expected: All 35 offline tests pass

  Command: python3 -m unittest discover -s tests

  Observed: ................................... ---------------------------------------------------------------------- Ran 35 tests in 58.433s OK

Local or hosted: local

Generate and review Tailscale grant fragments for agent-a/b/c with the offline agent_access.py CLI (summary, validate, generate, diff, and a scoped policy via --policy)

cd <guest-path> && pwd && ls -la && id -u && (git status 2>&1 | head -3) && cat README.md 2>/dev/null | head -200
cd <guest-path> && python3 --version && ls -la .coldpass tests .github && cat policy.json && cat release-check.json && cat .gitignore && cat CONTRIBUTING.md && ls -R .github tests | head -50
cd <guest-path> && python3 agent_access.py summary; echo "rc=$?"; python3 agent_access.py validate; echo "rc=$?"
cd <guest-path> && rm -f .coldpass/generated-fragment.hujson && python3 agent_access.py generate --output .coldpass/generated-fragment.hujson; echo "rc=$?"; cat .coldpass/generated-fragment.hujson; echo; echo ---; python3 -m unittest discover -s tests 2>&1 | tail -5; echo "rc=$?"
cd <guest-path> && python3 agent_access.py diff --against .coldpass/generated-fragment.hujson; echo "rc=$?"; python3 agent_access.py diff --against policy.json; echo "rc=$?"; ls -la .coldpass
cd <guest-path> && cat > .coldpass/scoped-policy.json <<'EOF'
{
  "version": 1,
  "lan_hosts": [{"name": "printer", "address": "<internal-ip>", "service": "printer"}],
  "agents": [
    {
      "name": "agent-a",
      "tag": "tag:agent-agent-a",
      "preset": "scoped",
      "allow": [{"host": "printer", "ports": ["tcp:631", "udp:8000-8010"]}],
      "never": ["unlisted_lan_hosts","other_agents","internet_or_exit_nodes","tailnet_administration","policy_or_device_changes","all_unlisted_ports"]
    }
  ]
}
EOF
python3 agent_access.py --policy .coldpass/scoped-policy.json validate; echo "rc=$?"; python3 agent_access.py --policy .coldpass/scoped-policy.json summary; echo "rc=$?"
cd <guest-path> && python3 agent_access.py --policy .coldpass/scoped-policy.json generate --output .coldpass/probe-scoped.hujson; echo "rc=$?"; cat .coldpass/probe-scoped.hujson
cd <guest-path> && grep -n -i -E "cron|schedul|loop|webhook|--once|--now|sleep|while |daemon|time\." agent_access.py | head; echo "grep rc=$?"; ls -la <guest-path> /inputs/ 2>&1 | head -20; grep -n -F 'Requires Python 3.10 or newer; no packages or network access are needed.' README.md; grep -n -F 'Choose `everything` to grant an agent all IP traffic to all destinations.' README.md; grep -n -F 'Run `python3 agent_access.py validate`' README.md; grep -n -F 'or `scoped` to grant only its listed LAN hosts and ports.' README.md; grep -n -F 'prints additions and removals.' README.md
cd <guest-path> && rm -f .coldpass/generated-fragment.hujson .coldpass/probe-scoped.hujson && mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["python3","agent_access.py","--policy",".coldpass/scoped-policy.json","generate","--output",".coldpass/probe-scoped.hujson"],"cwd":"<guest-path>","expected_file":".coldpass/probe-scoped.hujson","expected_text":"<internal-ip>"}
EOF
cat > .coldpass/claims.json <<'EOF'
[
{"kind":"claim","claim":"Quickstart runs offline with Python 3.10+ and no packages","source":"Requires Python 3.10 or newer; no packages or network access are needed.","input":"python3 agent_access.py summary","expected":"Summary lists agent-a with its tag","probe_kind":"cli","argv":["python3","agent_access.py","summary"],"expected_text":"agent-a (tag:agent-agent-a)","cwd":"<guest-path>"},
{"kind":"claim","claim":"everything preset grants all IP traffic to all destinations","source":"Choose `everything` to grant an agent all IP traffic to all destinations.","input":"python3 agent_access.py summary (checked-in policy)","expected":"Each agent shows the everything preset grant","probe_kind":"cli","argv":["python3","agent_access.py","summary"],"expected_text":"Everything preset: grants all IP traffic to all destinations.","cwd":"<guest-path>"},
{"kind":"claim","claim":"validate command checks the policy","source":"Run `python3 agent_access.py validate`","input":"python3 agent_access.py validate","expected":"Policy is valid.","probe_kind":"cli","argv":["python3","agent_access.py","validate"],"expected_text":"Policy is valid.","cwd":"<guest-path>"},
{"kind":"claim","claim":"scoped preset grants only listed LAN hosts and ports","source":"or `scoped` to grant only its listed LAN hosts and ports.","input":"scoped policy with printer <internal-ip> on tcp:631 and udp:8000-8010","expected":"Summary states the printer grant on those ports only","probe_kind":"cli","argv":["python3","agent_access.py","--policy",".coldpass/scoped-policy.json","summary"],"expected_text":"Grants access to printer (<internal-ip>) on tcp:631, udp:8000-8010.","cwd":"<guest-path>"},
{"kind":"claim","claim":"diff never writes files and prints additions","source":"prints additions and removals.","input":"diff --against policy.json (no grants array)","expected":"Lists the three everything grants as additions","probe_kind":"cli","argv":["python3","agent_access.py","diff","--against","policy.json"],"expected_text":"Added grants:","cwd":"<guest-path>"}
]
EOF
cat > .coldpass/examples.json <<'EOF'
[
{"kind":"example","claim":"Quickstart summary","source":"README.md Quickstart","input":"summary of checked-in policy","expected":"Agent Tailscale grants header printed","argv":["python3","agent_access.py","summary"],"cwd":"<guest-path>","env":{},"expected_text":"Agent Tailscale grants"},
{"kind":"example","claim":"Validate the checked-in policy","source":"README.md Quickstart","input":"validate checked-in policy","expected":"Policy is valid.","argv":["python3","agent_access.py","validate"],"cwd":"<guest-path>","env":{},"expected_text":"Policy is valid."},
{"kind":"example","claim":"Generate the Tailscale policy fragment to a file","source":"README.md Manual application / Quickstart generate","input":"generate --output .coldpass/example-fragment.hujson","expected":"Fragment file written with the agent tag","argv":["python3","agent_access.py","generate","--output",".coldpass/example-fragment.hujson"],"cwd":"<guest-path>","env":{},"expected_file":".coldpass/example-fragment.hujson","expected_text":"tag:agent-agent-a"},
{"kind":"example","claim":"Diff against an existing policy without writing","source":"README.md Quickstart diff command","input":"diff --against policy.json","expected":"Added grants section listed","argv":["python3","agent_access.py","diff","--against","policy.json"],"cwd":"<guest-path>","env":{},"expected_text":"Added grants:"},
{"kind":"example","claim":"Offline unit test suite from release-check","source":"CONTRIBUTING.md","input":"python3 -m unittest discover -s tests","expected":"All 35 offline tests pass","argv":["python3","-m","unittest","discover","-s","tests"],"cwd":"<guest-path>","env":{},"expected_text":"OK"}
]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Entry points inspected: agent_access.py has only argparse subcommands (summary, validate, generate, diff) and no scheduler, cron, loop, webhook, --once or --now option; the only 'exit 2' path is a parser error. The tool runs once per invocation, so no product cycle exists.","checks":[]}
EOF
for f in probe claims examples cycles; do python3 -I -c "import json,sys; json.load(open(sys.argv[1])); print('ok', sys.argv[1])" .coldpass/$f.json; done
cd <guest-path> && COLDPASS_WORKSPACE=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -60; echo "rc=${PIPESTATUS[0]}"
cd <guest-path> && python3 -I - <<'EOF'
import json
p='.coldpass/claims.json'
c=json.load(open(p))
c[1]['source']='Choose `everything` to grant an agent all IP traffic to all destinations,'
assert c[1]['source'] in open('README.md',encoding='utf-8').read()
json.dump(c,open(p,'w'),indent=1)
print('fixed')
EOF
COLDPASS_WORKSPACE=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -80; echo "rc=${PIPESTATUS[0]}"
cd <guest-path> && ls -la .coldpass && cat > .coldpass/report.json <<'EOF'
{
  "outcome": "working",
  "fault_owner": null,
  "operation": "Generate and review Tailscale grant fragments for agent-a/b/c with the offline agent_access.py CLI (summary, validate, generate, diff, and a scoped policy via --policy)",
  "operation_scope": "Offline only, Python 3.12.3 (README requires 3.10+), standard library only, no network or Tailscale connection. Scoped test used a placeholder RFC1918 printer address in .coldpass/scoped-policy.json, not a real LAN value. Product runs once per invocation; no product cycle.",
  "steps": [
    "python3 --version (3.12.3, meets README Requires Python 3.10 or newer)",
    "python3 agent_access.py summary",
    "python3 agent_access.py validate",
    "python3 agent_access.py generate --output <fresh path>",
    "python3 agent_access.py diff --against policy.json",
    "python3 -m unittest discover -s tests (release-check.json / CONTRIBUTING.md offline test command): 35 tests OK",
    "python3 agent_access.py --policy .coldpass/scoped-policy.json validate / summary / generate --output .coldpass/probe-scoped.hujson",
    "COLDPASS_WORKSPACE=<guest-path> python3 -I <guest-path> --validate --replay: valid true, replay PASS"
  ],
  "deviations": [
    "/inputs/coldpass-preflight.py does not exist in this guest; ran the checker at <guest-path> instead (same arguments).",
    "First validate pass rejected claim 2 because the quote had a trailing period not present in README line 3 (comma follows 'destinations'); corrected the quote to the exact substring and re-ran; passed.",
    "Workspace is not a git repository and no command needed Git metadata, so the git init/fetch/reset pin procedure was not run. Source snapshot was used as supplied.",
    "No install was needed: no packages or Node/uv, product is stdlib-only and Python 3.12.3 is present.",
    "Scoped-mode test used a policy in .coldpass (not policy.local.json) and the RFC1918 placeholder <internal-ip>, since the README's 192.0.2.25 is rejected by validation."
  ],
  "stuck_step": null,
  "main_blocker": null,
  "plain_failure": null,
  "suggested_fix": "None needed for this run. Optionally, the repo could document that the offline test command prints its OK line to stderr."
}
EOF
python3 -I -c "import json; d=json.load(open('.coldpass/report.json')); print('report ok', d['outcome'])"
cd <guest-path> && COLDPASS_WORKSPACE=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | python3 -I -c "import json,sys; d=json.load(sys.stdin); print('valid', d.get('valid'), 'problems', d.get('problems'), 'replay', d.get('replay',{}).get('status'))"