Azure · Pal Lakatos-Toth (pallakatos) · Sep 14, 2026 · Sep 8, 2026 · Sep 8, 2026 · Sep 8, 2026
@@ -1,2 +1,5 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 *.tgz
 *.tar.gz
@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 # cargo-audit configuration
 # See: https://docs.rs/cargo-audit/latest/cargo_audit/#configuration
 

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 target/
 cli/node_modules/
 .git/

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 # kars Code Owners
 # Each line is a file pattern followed by one or more owners.
 #

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Bug Report
 description: Report a bug in Kars
 body:

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 blank_issues_enabled: true
 contact_links:
   - name: Security Vulnerabilities (Critical/High)

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Feature Request
 description: Suggest a new feature for Kars
 body:

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Security Issue
 description: Report a security vulnerability (for critical vulnerabilities, use MSRC per SECURITY.md)
 body:

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: "Kars CodeQL Config"
 
 # No vendored AgentMesh source is present after the Phase 5.2 AGT-only migration.

@@ -1,3 +1,6 @@
+<!-- Copyright (c) Microsoft Corporation.
+Licensed under the MIT License. -->
+
 # Kars — Copilot Instructions
 
 ## What is Kars?

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 version: 2
 updates:
   # Rust / Cargo

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 # ---------------------------------------------------------
 # Azure DevOps Pipeline: Unified ESRP Release Publishing — kars
 #

@@ -1,3 +1,6 @@
+<!-- Copyright (c) Microsoft Corporation.
+Licensed under the MIT License. -->
+
 ## Summary
 <!-- Brief description of changes -->
 

@@ -1,6 +1,9 @@
 ---
 description: "Kars AGT E2E encryption skill — how the Signal Protocol inter-agent messaging works, how to debug it, and what was patched."
 ---
+<!-- Copyright (c) Microsoft Corporation.
+Licensed under the MIT License. -->
+
 
 # AGT E2E Encrypted Inter-Agent Communication
 

@@ -1,6 +1,9 @@
 ---
 description: "Kars deployment and infrastructure skill — how to deploy, build images, manage AKS, and troubleshoot."
 ---
+<!-- Copyright (c) Microsoft Corporation.
+Licensed under the MIT License. -->
+
 
 # Kars Deployment & Infrastructure
 

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Refresh Blocklist Seed
 
 on:

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Check AGT Released
 
 # Runs daily to detect when Microsoft AGT publishes a release that

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: ci-gates
 
 on:
@@ -47,6 +50,10 @@ jobs:
       - name: Make scripts executable
         run: chmod +x ci/*.sh
 
+      - name: Verify fresh audit-record boundaries
+        if: matrix.gate == 'security-audit-required'
+        run: python3 -m unittest discover -s ci/tests -p security_audit_gate_test.py
+
       - name: Run gate ${{ matrix.gate }}
         shell: bash
         env:
@@ -59,5 +66,8 @@ jobs:
             no-null-provider-prod)     ./ci/no-null-provider-prod.sh ;;
             security-audit-required)   ./ci/security-audit-required.sh ;;
             a2a-module-isolation)      ./ci/a2a-module-isolation.sh ;;
-            copyright-headers)         ./ci/check-copyright-headers.sh ;;
+            copyright-headers)
+              python3 ci/tests/copyright_headers_test.py
+              ./ci/check-copyright-headers.sh
+              ;;
           esac
@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: CI
 
 on:
@@ -415,10 +418,20 @@ jobs:
         with:
           version: v1.30.5
       - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: "22"
+      - name: Build same-source CLI for schema request parity
+        working-directory: cli
+        run: npm ci && npm run build
+      - name: Require the compiled production schema request helper
+        run: node tests/e2e/sre_authority/task_schema_payload.mjs check
       - name: Check public-schema diagnostic privacy
-        run: PYTHONPATH=tests/e2e python3 -m unittest sre_authority.registration_schema_test sre_authority.bootstrap_probe_test sre_authority.binding_probe_test sre_authority.legacy_crds_test eval_pod_admission_test receipt_log_rotation_test
+        run: PYTHONPATH=tests/e2e python3 -m unittest sre_authority.registration_schema_test sre_authority.bootstrap_probe_test sre_authority.binding_probe_test sre_authority.legacy_crds_test sre_authority.connection_proxy_test credential_schema_test credential_policy_schema_test sandbox_condition_schema_test eval_pod_admission_test private_consumption_test receipt_log_rotation_test governed_services_test
       - name: Create the same disposable API server as the real harness
         run: kind create cluster --name kars-e2e --config tests/e2e/kind-config.yaml --kubeconfig "$KUBECONFIG"
+      - name: Prove native Sandbox condition generation pruning, retention and type validation
+        run: PYTHONPATH=tests/e2e python3 -m sandbox_condition_schema
       - name: Prove native historical Helm wait orders CRDs before hooks and permits schema upgrades
         run: PYTHONPATH=tests/e2e python3 -m sre_authority.legacy_crd_probe
       - name: Reset disposable cluster after historical Helm proof
@@ -428,7 +441,14 @@ jobs:
       - name: Validate the SRE CRD against the actual API server
         id: sre_schema
         run: python3 tests/e2e/sre_authority/registration_schema.py --exercise
+      - name: Prove shipped credential CEL with matching and mismatched native namespace UIDs
+        id: credential_schema
+        run: PYTHONPATH=tests/e2e python3 -m credential_schema
+      - name: Prove shipped credential store, rebind and exposure policies against native types
+        id: credential_policy_schema
+        run: PYTHONPATH=tests/e2e python3 -m credential_policy_schema
       - name: Prove controller Pod admission with all chart policies and no image execution
+        if: ${{ !cancelled() && steps.sre_schema.outcome == 'success' }}
         id: sre_bootstrap
         run: PYTHONPATH=tests/e2e python3 -m sre_authority.bootstrap_probe --retirement-bind-proof
       - name: Collect nil-schema adapter candidate evidence without weakening production gates
@@ -445,8 +465,12 @@ jobs:
           path: |
             e2e-sre-schema-diag/versions.json
             e2e-sre-schema-diag/legacy-helm-readiness.json
+            e2e-sre-schema-diag/migration-seed-*.json
             e2e-sre-schema-diag/validation.json
             e2e-sre-schema-diag/validation-instances.json
+            e2e-sre-schema-diag/credential-namespace-uid.json
+            e2e-sre-schema-diag/credential-policy-typechecking.json
+            e2e-sre-schema-diag/sandbox-condition-generation.json
             e2e-sre-schema-diag/namespace-accessor-candidate.json
             e2e-sre-schema-diag/namespace-accessor-candidate-instances.json
             e2e-sre-schema-diag/bootstrap-*.json
@@ -464,6 +488,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
       - run: helm lint deploy/helm/kars
+      - run: python3 tools/private-consumption-bundle.py --check
       - name: Preserve task admission defaults with reused legacy values
         run: python3 ci/helm-task-floor-compat.py
       - name: Render installation profiles
@@ -514,6 +539,8 @@ jobs:
           version: v0.24.0
       - name: Restore existing YAML and test dependencies
         run: npm ci --prefix cli
+      - name: Verify public schema diagnostic and credential redaction boundaries
+        run: node --test tests/e2e/budget-api-kubectl.test.mjs
       - name: Create disposable supported apiserver before any Rust image build
         run: kind create cluster --name kars-budget-api --image kindest/node:v1.31.0 --config tests/e2e/kind-config.yaml
       - name: Validate real CRD/CEL and Pod audience identity
@@ -687,12 +714,14 @@ jobs:
           # save cost.
           save-if: false
 
+      - name: Test bounded CI dependency acquisition
+        run: python3 -m unittest discover -s ci/tests -p acquisition_test.py
+
       - name: Install kind
         if: steps.paths.outputs.run == 'true'
-        uses: helm/kind-action@ef37e7f390d99f746eb8b610417061a60e82a6cc # v1.14.0
-        with:
-          install_only: true
-          version: v0.24.0
+        # Official v0.24.0 checksum; bounded HTTPS acquisition, no tool-cache
+        # fallback or implicit kubectl install. Cluster lifecycle is unchanged.
+        run: python3 ci/acquire_test_tools.py kind
 
       - name: Install kubectl
         if: steps.paths.outputs.run == 'true'

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: CodeQL
 
 on:

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Dependency Review
 
 on:

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Image Cache Publish
 
 # Publishes runtime container images (controller, inference-router,

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Image Build, Sign & SBOM
 
 on:

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Perf Nightly (k6)
 
 # Phase 2 S16. Wall-clock perf smoke against the inference router.

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Internal Release (private, wall-off)
 
 # Cuts a REAL release end-to-end with EVERY artefact stored behind the wall.

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Public Release (GHCR + GitHub Release)
 
 # ─────────────────────────────────────────────────────────────────────────

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Release
 
 on:

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: OpenSSF Scorecard
 
 # OpenSSF Scorecard runs weekly + on push to main, but ONLY when the

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 name: Secret Scanning
 
 on:

@@ -1,3 +1,6 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
 ## Ignore Visual Studio temporary files, build results, and
 ## files generated by popular Visual Studio add-ons.
 ##

@@ -1,3 +1,6 @@
+<!-- Copyright (c) Microsoft Corporation.
+Licensed under the MIT License. -->
+
 # Changelog
 
 All notable changes to kars will be documented in this file.

@@ -1,3 +1,6 @@
+<!-- Copyright (c) Microsoft Corporation.
+Licensed under the MIT License. -->
+
 # Microsoft Open Source Code of Conduct
 
 This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).