Cedar as the policy language in OpenShell

.github/workflows/docs.yml

@@ -56,6 +56,7 @@ jobs:
           node --check docs/javascripts/navigation-drawer.js
           node --check docs/javascripts/dev-notes.js
           node --check docs/javascripts/pi-traces.js
+          node --check docs/javascripts/mathjax.js
 
       - name: Test navigation JavaScript behavior
         run: node tests/navigation-drawer.test.js

docs/dev-notes/authors.json

@@ -9,6 +9,11 @@
     "github": "zredlined",
     "description": "OpenShell Team @ NVIDIA"
   },
+  "vishwa-raman": {
+    "name": "Vishwanath Raman",
+    "github": "vishwa-raman",
+    "description": "OpenShell Team @ NVIDIA"
+  },
   "kirit93": {
     "name": "Kirit Thadaka",
     "github": "kirit93",

docs/dev-notes/index.md

@@ -40,6 +40,7 @@ hide:
           <option value="zredlined">Alex Watson</option>
           <option value="johnnygreco">Johnny Greco</option>
           <option value="kirit93">Kirit Thadaka</option>
+          <option value="vishwa-raman">Vishwanath Raman</option>
           </select>
         </label>
         <button type="button" class="dev-notes-filters__clear" hidden>Clear filters</button>
@@ -50,22 +51,23 @@ hide:
     <div class="journal-section__head">
       <h2 id="featured-note-title" aria-live="polite" aria-atomic="true">Featured note</h2>
     </div>
-    <article class="dev-note-card dev-note-card--featured dev-note-card--research dev-note-card--has-image" data-category="research" data-authors="[&quot;zredlined&quot;]">
-      <a class="dev-note-card__link" href="posts/2026-11-06-protecting-frontier-agent-workloads/">
+    <article class="dev-note-card dev-note-card--featured dev-note-card--research dev-note-card--has-image" data-category="research" data-authors="[&quot;vishwa-raman&quot;]">
+      <a class="dev-note-card__link" href="posts/2026-11-09-cedar-policy-language/">
       <div class="dev-note-card__visual dev-note-card__visual--research dev-note-card__visual--image" aria-hidden="true">
-        <img class="dev-note-card__visual-image" src="../assets/frontier-agent-workloads/hero.png" alt="" loading="eager" fetchpriority="high">
+        <img class="dev-note-card__visual-image dev-note-image--light" src="../assets/cedar-policy/hero.png" alt="" loading="eager" fetchpriority="high">
+        <img class="dev-note-card__visual-image dev-note-image--dark" src="../assets/cedar-policy/hero-dark.png" alt="" loading="eager" fetchpriority="high">
       </div>
       <div class="dev-note-card__copy">
         <div class="dev-note-card__meta">
-          <time datetime="2026-11-06">November 6, 2026</time>
+          <time datetime="2026-11-09">November 9, 2026</time>
           <span>Research</span>
         </div>
-        <h3>Protecting frontier agent workloads with OpenShell</h3>
-        <p class="dev-note-card__summary">A reference architecture for how to run long-running, frontier-level agents on live systems, and the thirty-year-old security foundation it is built on.</p>
+        <h3>Cedar as the policy language in OpenShell</h3>
+        <p class="dev-note-card__summary">Why OpenShell is adopting Cedar for sandbox policy: decidable policy comparison, an open industry standard, and a path to temporal policies.</p>
         <div class="dev-note-card__footer">
-        <span class="dev-note-card__authors" aria-label="Author: Alex Watson">
-          <img src="https://github.com/zredlined.png?size=64" alt="" loading="lazy">
-          <span class="dev-note-card__author-names">Alex Watson</span>
+        <span class="dev-note-card__authors" aria-label="Author: Vishwanath Raman">
+          <img src="https://github.com/vishwa-raman.png?size=64" alt="" loading="lazy">
+          <span class="dev-note-card__author-names">Vishwanath Raman</span>
         </span>
           <span class="dev-note-card__read">Read note</span>
         </div>
@@ -79,6 +81,28 @@ hide:
       <h2 id="recent-notes-title">Recent notes</h2>
     </div>
     <div class="dev-notes-recent-list">
+    <article class="dev-note-card dev-note-card--recent dev-note-card--research dev-note-card--has-image" data-category="research" data-authors="[&quot;zredlined&quot;]">
+      <a class="dev-note-card__link" href="posts/2026-11-06-protecting-frontier-agent-workloads/">
+      <div class="dev-note-card__visual dev-note-card__visual--research dev-note-card__visual--image" aria-hidden="true">
+        <img class="dev-note-card__visual-image" src="../assets/frontier-agent-workloads/hero.png" alt="" loading="lazy">
+      </div>
+      <div class="dev-note-card__copy">
+        <div class="dev-note-card__meta">
+          <time datetime="2026-11-06">November 6, 2026</time>
+          <span>Research</span>
+        </div>
+        <h3>Protecting frontier agent workloads with OpenShell</h3>
+        <p class="dev-note-card__summary">A reference architecture for how to run long-running, frontier-level agents on live systems, and the thirty-year-old security foundation it is built on.</p>
+        <div class="dev-note-card__footer">
+        <span class="dev-note-card__authors" aria-label="Author: Alex Watson">
+          <img src="https://github.com/zredlined.png?size=64" alt="" loading="lazy">
+          <span class="dev-note-card__author-names">Alex Watson</span>
+        </span>
+          <span class="dev-note-card__read">Read note</span>
+        </div>
+      </div>
+      </a>
+    </article>
     <article class="dev-note-card dev-note-card--recent dev-note-card--announcements dev-note-card--has-image" data-category="announcements" data-authors="[&quot;johnnygreco&quot;]">
       <a class="dev-note-card__link" href="posts/2026-09-28-introducing-openshell-research/">
       <div class="dev-note-card__visual dev-note-card__visual--announcements dev-note-card__visual--image" aria-hidden="true">