Omar SobhandClaude Opus 5.5 72fb0dcb6f feat(llm-proxy): mission containers reach their models through a key-adding proxy (flagged) ...

Container-tier missions held the platform's provider keys in their environment,
readable by an agent with Bash and public egress. With CLAWMATES_LLM_PROXY=1
(and CLAWMATES_LLM_PROXY_SECRET), a container instead holds a per-mission token
where each key was, ANTHROPIC_BASE_URL points at the server's proxy on :8089
(not published, not routed by Traefik), and the GLM/Kimi hops' base URLs are
rewritten in the mission's config copy. The proxy verifies the token
(HMAC(secret, mission_id) — stateless, survives redeploys), refuses it unless
the mission is running, swaps in the real credential and streams the response.

Spiked first on gw-04: Claude Code on a subscription OAuth token, given only a
placeholder and a base URL, sent nothing but POST /v1/messages there and
answered once the placeholder was swapped. Off by default; no behaviour change
until enabled.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

2026-09-23 12:35:01 -05:00

..

src

feat(llm-proxy): mission containers reach their models through a key-adding proxy (flagged)

2026-09-23 12:35:01 -05:00

tests

feat(judge): the judge commits to a verification plan before it reads the evidence

2026-09-20 22:07:39 -05:00

Cargo.toml

feat(llm-proxy): mission containers reach their models through a key-adding proxy (flagged)

2026-09-23 12:35:01 -05:00