register: pai-review-mode — Platform-Agnostic Review Mode

[Steffen025]

Registration: pai-review-mode

Registers pai-review-mode as a standalone tool on the blackboard, following the architecture pattern outlined by @mellanon in PR #102 comment.

Source Repository

Steffen025/pai-review-mode

What It Does

Platform-Agnostic Review Mode for PAI agents — True Dual-Context isolation for safely processing untrusted code contributions. Addresses 7 identified gaps in the CaMeL framework (DeepMind, 2025).

Core capabilities:

• HMAC-SHA256 TypedReferences for cryptographic file access authorization
• Hook-enforced tool allowlist (Read, Grep, Glob only — 23 tools blocked)
• Platform adapters for OpenCode (throw Error()) and Claude Code (process.exit(2))
• Rate limiting (100/min per agent, 5 concurrent max)
• Buffered JSONL audit logging with sensitive data redaction

Stats

• 364 tests (123 unit + 165 integration + 85 adversarial + 11 benchmark)
• 89.26% line coverage
• HMAC generation: 0.02ms avg
• Hook enforcement: 0.01ms p99

History

Originally developed as contributions/review-mode/ in PR #102. Relocated to standalone repository per the blackboard architecture pattern: code lives in contributor repos, blackboard tracks coordination.

Blackboard Artifacts

• projects/pai-review-mode/README.md — Project overview
• projects/pai-review-mode/PROJECT.yaml — Source pointer to Steffen025/pai-review-mode
• projects/pai-review-mode/JOURNAL.md — Initial journal entries

Relationship to Ecosystem

• Complements pai-content-filter (inbound defense) with review-time isolation
• Informed by adversarial reviews: PRs review: Adversarial security review of pai-content-filter #90 (content-filter), review: Adversarial security review of The Hive protocol specifications #99 (Hive protocol), review: Security hardening review of ivy-blackboard + ivy-heartbeat #100 (ivy), review: External review of pai-collab trust model and governance framework #101 (trust model) — all merged
• Addresses pai-collab Issue signal: Implement review mode — tool restrictions for untrusted content #17 (review mode tool restrictions)