Queryable firewall/flow claims + cross-server query surface (CLI + MCP)#38

Merged

Svaag merged 8 commits into

mainfrom

feat/network-flows-queryable

Jul 11, 2026

Commits on Jul 11, 2026

okf: enrich host projection with OS/role + resolved flows + decomposed claims

Svaag
and
claude
committed
knowledge: cross-server firewall/flow query surface (CLI + MCP)

Svaag
and
claude
committed
network-flows: honor `except`, synthesize router inbound, carry family

Svaag
and
claude
committed
network-flows: honor all_excludes + cross-cutting family (review round 2)

Svaag
and
claude
committed
network-flows: atom-split protos/ports, stop `any` expansion, fix source attribution

Svaag
and
claude
committed
knowledge: policy-gate the firewall/flow MCP tools

Svaag
and
claude
committed
network-flows: keep every peer address in one relationship claim

Svaag
and
claude
committed
knowledge: mirror firewall/flow actions in the built-in default policy

Svaag
and
claude
committed