[zredlined]

Adds “Protecting frontier agent workloads with OpenShell,” a Dev Note on the reference architecture for long-running frontier agents on live systems. Includes the approved hero, SVG figures with titles in Markdown, links to earlier adversarial testing and policy-prover research, and a short explanation of the example integrations added through OpenShell’s existing interfaces. Includes documentation and images only.

Validation: renderer tests (11 passed), clean documentation build including rendered Markdown/navigation/SEO checks, comparison against the source text with the approved edits, and browser review in Chromium and WebKit across light/dark themes and desktop/tablet/phone widths. The final article checks passed 16/20; the four failures reproduce the existing Chromium desktop reading-width assertion on the unchanged Policy Prover article. Index and thumbnail checks also passed.

[github-actions]

Documentation preview

The preview has been removed.

[johnnygreco]

"Accesses" vs. "permissions": the note uses "accesses" in six places, but also uses "permissions" for the same idea (for example, "grow its permissions" on line 76). Most readers treat "access" as uncountable, so "accesses" reads a little unusual. Consider standardizing on "permissions":

• Line 70: "abuses accesses that it was legitimately granted" → "abuses permissions that it was legitimately granted"
• Line 70: "through accesses that had already been reviewed…" → "through permissions that had already been reviewed…"
• Line 76: "the agent's accesses near zero" → "the agent's permissions near zero"
• Line 100: "propose new accesses through the Policy Advisor" → "propose new permissions through the Policy Advisor"
• Line 110: "start the agent at near zero with accesses" → "start the agent with near-zero permissions"
• Line 104: "give powerful, possibly hostile processes accesses to things they can misuse" → here "access to things" reads better than "permissions to things"

Not blocking. Feel free to keep "accesses" if it's intentional.

[johnnygreco]

Thanks @zredlined!