Compatibility · v0.10.2
Tested boundaries, not universal claims
RuleOak separates automated fixture coverage from real-world integration reports and documents what has not been claimed.
Runtime support
| Environment | Status | Validation |
|---|---|---|
| Node.js 22 LTS | Tested | Full Linux publish-readiness suite |
| Node.js 24 LTS | Tested | Linux suite plus macOS and Windows smoke tests |
| Node.js 26 Current | Compatibility signal | Linux CI; prefer an LTS line for production-like use |
| ESM | Tested | Public ESM entry points and TypeScript declarations |
CommonJS require() | Not supported | Use ESM or dynamic import() |
Integration paths
| Path | Status | Boundary |
|---|---|---|
Node.js createRuleOak() SDK | Tested | Calls explicitly routed through guarded functions/tools |
CLI protect | Tested for supported stdio traffic | Does not inspect arbitrary subprocess internals |
| MCP stdio | Fixture-tested | JSON-RPC tools/call, lifecycle messages, notifications, and batches |
| MCP Streamable HTTP | Fixture-tested | Authorized requests and supported SSE responses |
| REST authorization API | Locally tested | Loopback by default; non-loopback requires explicit authentication |
| OpenAI-style tool-call adapter | Unit-tested | Normalization/authorization only; not an OpenAI network client |
| Shell, filesystem, HTTP adapters | Unit-tested | Application-layer normalization and policy checks |
Security behavior exercised
- Denied or unapproved guarded actions do not reach the executor
- Malformed supported protocol input fails closed
- One-time execution grants reject replay
- Policy changes invalidate bound receipts
- Evidence chains and bundle digests are verifiable
- Persistent approval choices require explicit review
- Published CLI tarballs include built-in policy packs
Not claimed
RuleOak does not currently claim universal MCP client/server compatibility, OS containment, control over bypass paths, complete prompt-injection detection, tamper-proof evidence against a privileged local attacker, or independent security certification.