Skip to content

SCP_ENV_AND_TRUST.md

Latest commit

 

History

History
20 lines (13 loc) · 1.83 KB

SCP_ENV_AND_TRUST.md

File metadata and controls

20 lines (13 loc) · 1.83 KB

SCP environment and trust (OpenHarness)

Pre-commit hooks scripts/sanitize_input.py and scripts/validate_handoff_scp.py call the SCP package’s run_pipeline on handoff and state markdown.

Optional semantic judge

When SCP’s semantic judge path is enabled (see SCP package docs and docs/contracts/scp_mcp_v1.md), pipeline code may send a bounded excerpt of your content to a local LLM HTTP endpoint (commonly OLLAMA_BASE_URL, default http://localhost:11434) for an additional tier decision.

Treat this like any outbound request:

  • OLLAMA_BASE_URL must be an origin only (http/https, no path, query, or userinfo). Allowed hosts: localhost, 127.0.0.1, ::1, plus comma-separated OLLAMA_ALLOWED_HOSTS. Optional OLLAMA_URL_STRICT=1 rejects names that resolve to private or link-local addresses.
  • The client uses requests with allow_redirects=False to /api/generate; cross-host redirect chains are not followed.
  • Optional auth: OLLAMA_API_KEY is sent as Authorization: Bearer … — never put tokens in the URL.
  • Point the URL only at a host you trust (typically loopback for local Ollama). Use firewall / network policy so the process cannot reach sensitive internal subnets unless intended.
  • Do not aim it at arbitrary URLs on shared or CI machines unless you intend that traffic.
  • Keep semantic judge off in CI and locked-down environments unless you explicitly need it; default pre-commit does not require it.

Secrets and API keys do not belong in handoff or state files; SCP reduces prompt-injection risk but does not replace judgment about what you commit.

See also: MCP_PRIVATE_HOST.md, VERIFY_NOT_TRUST.md.