Proxy

GET /proxy/status

Public status: filter stats, current thresholds, queue depth.

{
  "filters_enabled": 16,
  "filters_total": 17,
  "auto_allow_threshold": 3.0,
  "auto_deny_threshold": 8.0,
  "queue_depth": 2,
  "decisions_last_minute": { "allow": 412, "queue": 3, "deny": 1 }
}

POST /proxy/test

Dry-run a tool call shape. Returns the would-be decision and full filter breakdown. This is the REST equivalent of grith proxy test.

Request:

{
  "operation": "file_read",
  "target": "/home/you/.ssh/config"
}

Response:

{
  "decision": "queue",
  "composite_score": 4.2,
  "filters": [
    {
      "name": "sensitive_path",
      "score": 3.5,
      "annotations": ["ssh-config"]
    },
    {
      "name": "path_match",
      "score": 1.2
    }
  ]
}

POST /proxy/evaluate (IPC)

Internal endpoint used by thin-client supervisors to evaluate a real syscall. Authenticated by loopback origin only. Should not be called by user code.

GET /proxy/status/full (IPC)

Extended state including per-filter metrics, per-session counters, and recent decision histograms. Used by the dashboard.

See also

• Composite scoring
• grith proxy test
• Filter reference