Phase 2: enforce deny-by-default AI egress controls

[hoang12122]

Phạm vi

Triển khai Giai đoạn 2 của roadmap #62:

• Docker/Kubernetes deny-by-default cho AI runtime.
• Allowlist chỉ cho TrustGraph, Ollama/NemoClaw, PostgreSQL và internal services đã duyệt.
• Host firewall contract cho AI container networks.
• Bằng chứng CI/staging rằng public DNS/IP không truy cập được.
• Cấm public port; chỉ loopback/private network.
• Rollback policy có kiểm soát.

Ràng buộc

• Không public AI/API.
• Không quét ngoài phạm vi CI/staging.
• Không nới lỏng CodeQL, Security Gate, Docker Gate hoặc IRONCLAD.
• Không merge trước khi có executable tests và rollback evidence.

Liên quan #62.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 34f5aa17-1a33-4518-9ae9-d4b528b2c155

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch agent/phase-2-ai-egress-control

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}