lintai docs

Appearance

Rule Reference

SEC402lintai-policy-mismatchpreviewworkspacewarn

Policy mismatch: network access

Project policy forbids network access, but repository contains network behavior

Provider
lintai-policy-mismatch
Surface
workspace
Scope
workspace
Tier
preview
Severity
warn
Confidence
high
Detection
structural
Remediation
none

Activation Model

Preset Membership

This rule is part of the builtin activation graph through these preset memberships.

compatmembership

Lifecycle

Preview Lifecycle Contract

State

preview_blocked

Promotion blocker

Needs workspace-level network precision review and linked graduation corpus before promotion to Stable.

Promotion requirements

Needs workspace precision review, linked benign/malicious corpus proof, and completed stable checklist metadata.

Canonical note

Structural preview rule; deterministic today, but the preview contract may still evolve.

Nearby Signals

Related Rules

SEC401Policy mismatch: executionProject policy forbids execution, but repository contains executable behaviorworkspacepreview
SEC403Skill capabilities mismatchSkill frontmatter capabilities conflict with project policyworkspacepreview
SEC756Dependency vulnerability: installed npm package versionInstalled npm dependency version matches an offline vulnerability advisoryworkspacepreview

Why It Matters ​

Project policy forbids network access, but repository contains network behavior.

What Triggers ​

Document the concrete trigger shape, scope boundaries, and examples for SEC402 here.

False Positives ​

Capture the realistic false-positive envelope and when this rule should stay enabled.

Remediation ​

Describe the preferred remediation flow, including when to rely on built-in fixes or suggestions.