docs: add defense-in-depth security analyzer section#402
Open
Fieldnote-Echo wants to merge 7 commits intoOpenHands:mainfrom
Open
docs: add defense-in-depth security analyzer section#402Fieldnote-Echo wants to merge 7 commits intoOpenHands:mainfrom
Fieldnote-Echo wants to merge 7 commits intoOpenHands:mainfrom
Conversation
6 tasks
Analyzers now live in openhands.sdk.security, not an example file. Rewritten for adult learning theory: problem first, then solution, then composition, then design rationale, then limitations. Import paths updated, every example pairs analyzer with ConfirmRisky, old example/noisy-OR references removed.
- Add UX description of what user sees when prompt triggers - Move Warning about execute_tool() bypass to quick start section - Make two-corpus explanation more concrete with example Co-authored-by: openhands <openhands@all-hands.dev>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Documents the defense-in-depth security analyzer family now in
openhands.sdk.security.defense_in_depth. Updated to match the SDK promotion in OpenHands/software-agent-sdk#2472.What this covers
PatternSecurityAnalyzer,PolicyRailSecurityAnalyzer,EnsembleSecurityAnalyzerConfirmRiskypairing (analyzer selection does not automatically change confirmation policy)LLMSecurityAnalyzerfor deeper coverageexamples/01_standalone_sdk/47_defense_in_depth_security.pyStructure
Content follows adult learning theory: problem first, then solution, then quick start, then composition, then rationale, then limitations.
All imports use
from openhands.sdk.security import ...— no example-file imports.Companion to OpenHands/software-agent-sdk#2472.