What you'll build: macOS route/interface observation for the agent, mirroring the existing Linux collector contract.
Where: agent/collectors/ (new macOS collector; see the Linux implementation for the shape of emitted events).
Expected behavior: interface list, default route, and route-change events emitted as DETECTED evidence only — no verification claims; fail-closed when data is unavailable.
How to test: unit tests with recorded fixture output (netstat -rn / SystemConfiguration samples); no live-network assertions in CI.
Mentor: @DBarr3 · read docs/evidence-model.md first
What you'll build: macOS route/interface observation for the agent, mirroring the existing Linux collector contract.
Where:
agent/collectors/(new macOS collector; see the Linux implementation for the shape of emitted events).Expected behavior: interface list, default route, and route-change events emitted as
DETECTEDevidence only — no verification claims; fail-closed when data is unavailable.How to test: unit tests with recorded fixture output (
netstat -rn/ SystemConfiguration samples); no live-network assertions in CI.Mentor: @DBarr3 · read
docs/evidence-model.mdfirst