Add Network Door and Native Assistant Door CLI surfaces

Adds non-mutating sourceosctl network and native-assistant plan/probe surfaces with tests, docs, and README wiring.

Author: mdheller

README.md

@@ -16,6 +16,7 @@ It should contain:
 - lab/profile selection utilities;
 - local model-service client helpers;
 - model-router client utilities;
+- Network Door, Firewall Door, Mesh Door, BYOM provider, and Native Assistant Door plan/probe helpers;
 - guardrail/eval/evidence helpers;
 - agent sandbox/run helpers;
 - Local Model Door runtime detection and route planning helpers;
@@ -35,7 +36,10 @@ It should not contain:
 - model-router backend;
 - web control plane backend;
 - SourceOS image build state;
-- secrets, tokens, credentials, private keys, or device-specific enrollment secrets.
+- secrets, tokens, credentials, private keys, or device-specific enrollment secrets;
+- firewall mutation engines;
+- service mesh installers;
+- native assistant runtime adapters.
 
 ## sourceosctl CLI
 
@@ -66,6 +70,11 @@ sourceosctl [--version] <command> [<subcommand>] [options]
 | `sourceosctl local-model plan --profile local-llama32-1b` | Render local model runtime plan without installing or running models |
 | `sourceosctl local-model route --task-class office-assist` | Render hash-only model route decision under local-first policy |
 | `sourceosctl local-model evidence inspect <path>` | Inspect local model route evidence JSON |
+| `sourceosctl network doctor` | Inspect Network Door contract posture without changing firewall, mesh, or provider state |
+| `sourceosctl network plan --destination <label>` | Render a hash-only Network Door route plan |
+| `sourceosctl network provider` | Render a BYOM / external model provider plan without contacting the provider |
+| `sourceosctl network evidence inspect <path>` | Inspect Network Door evidence JSON |
+| `sourceosctl native-assistant plan` | Render a native assistant bridge plan without invoking host assistant APIs |
 | `sourceosctl agent-machine mounts plan` | Render Agent Machine local mount plan for dev/docs/downloads roots (dry-run) |
 | `sourceosctl agent-machine mounts init --dry-run` | Render mount initialization plan; no directories or mounts are created |
 | `sourceosctl agent-machine mounts init --execute --policy-ok` | Create only scoped local output/download directories and emit AgentMachineMountEvidence |
@@ -99,6 +108,12 @@ python3 bin/sourceosctl local-model doctor
 python3 bin/sourceosctl local-model profiles
 python3 bin/sourceosctl local-model plan --profile local-llama32-1b
 python3 bin/sourceosctl local-model route --task-class office-assist --prompt "local prompt text is hashed only"
+python3 bin/sourceosctl network doctor
+python3 bin/sourceosctl network plan --destination models.enterprise.example
+python3 bin/sourceosctl network plan --enterprise --mesh --allow-listed --destination models.enterprise.example
+python3 bin/sourceosctl network provider --provider-class openai-compatible --owner user
+python3 bin/sourceosctl native-assistant plan --operation open-workroom
+python3 bin/sourceosctl native-assistant plan --operation create-office-artifact --prompt "local prompt text is hashed only"
 python3 bin/sourceosctl agent-machine mounts plan
 python3 bin/sourceosctl agent-machine mounts init --dry-run
 python3 bin/sourceosctl agent-machine mounts init --execute --policy-ok --evidence-out ./mount-evidence.json
@@ -132,6 +147,44 @@ Default profiles:
 
 The Local Model Door does **not** pull model weights, start Ollama, run inference, send prompts off-device, or authorize tool use. `local-model route --prompt ...` emits only a SHA-256 prompt hash.
 
+### Network Door, Mesh Door, BYOM, and Native Assistant Door defaults
+
+The Network/Assistant Door slice aligns with `SourceOS-Linux/sourceos-spec`:
+
+- `NetworkAccessProfile`
+- `FirewallBindingProfile`
+- `MeshBindingProfile`
+- `ExternalModelProviderProfile`
+- `NativeAssistantBridgeProfile`
+
+Default refs:
+
+| Purpose | Ref |
+| --- | --- |
+| Enterprise/user network stack | `urn:srcos:network-access-profile:enterprise-and-user-default` |
+| User firewall profile | `urn:srcos:firewall-binding-profile:macos-lulu-user-default` |
+| Enterprise firewall profile | `urn:srcos:firewall-binding-profile:enterprise-gateway-default` |
+| Istio/Admiral-style mesh profile | `urn:srcos:mesh-binding-profile:istio-egress-default` |
+| User BYOM OpenAI-compatible provider profile | `urn:srcos:external-model-provider-profile:user-openai-compatible` |
+| Apple App Intents native assistant bridge profile | `urn:srcos:native-assistant-bridge-profile:apple-app-intents-default` |
+
+The Network Door does **not** mutate firewall rules, install mesh components, contact external model providers, store credentials, or send prompts. Destination labels are represented as SHA-256 hashes in route plans.
+
+The Native Assistant Door does **not** invoke Siri, App Intents, Shortcuts, Android intents, Windows shell integrations, browser extensions, or MCP/native bridge transports. It renders a bridge plan with prompt text redacted to a SHA-256 hash when provided.
+
+Default policy posture:
+
+- default egress is denied;
+- BYOM provider auth must be a reference, never inline;
+- enterprise firewall denies have precedence over user allows;
+- user firewall profiles may be stricter than enterprise profiles;
+- mesh binding and firewall binding are complementary, not interchangeable;
+- prompt egress is denied by default;
+- native assistant side effects require user confirmation;
+- raw app database access is denied by default.
+
+See `docs/integration/network-native-assistant-door.md`.
+
 ### Agent Machine local mount defaults
 
 The first Agent Machine mount slice aligns with the SourceOS contracts in `SourceOS-Linux/sourceos-spec`:
@@ -229,4 +282,3 @@ The validation target runs the unit test suite and checks repository metadata. A
 ```bash
 make test   # run tests only
 ```
-

bin/sourceosctl

@@ -6,6 +6,19 @@ import os
 # Allow running directly from the repo root without installing.
 sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
 
+# Lightweight plugin routing for newer command groups while keeping the core
+# argparse surface stable. These command groups are non-mutating plan/probe
+# surfaces and own their own subparsers.
+if len(sys.argv) > 1 and sys.argv[1] == "network":
+    from sourceosctl.commands.network import network_main
+
+    sys.exit(network_main(sys.argv[2:]))
+
+if len(sys.argv) > 1 and sys.argv[1] == "native-assistant":
+    from sourceosctl.commands.network import native_assistant_main
+
+    sys.exit(native_assistant_main(sys.argv[2:]))
+
 from sourceosctl.cli import main
 
 sys.exit(main())

docs/integration/network-native-assistant-door.md

@@ -0,0 +1,73 @@
+# Network Door and Native Assistant Door CLI boundary
+
+This slice adds non-mutating SourceOS operator surfaces for the contract family defined in `SourceOS-Linux/sourceos-spec`:
+
+- `NetworkAccessProfile`
+- `FirewallBindingProfile`
+- `MeshBindingProfile`
+- `ExternalModelProviderProfile`
+- `NativeAssistantBridgeProfile`
+
+The implementation is intentionally a plan/probe surface. It does not modify firewall state, install service mesh components, contact model providers, start model calls, invoke Siri/App Intents/native assistant APIs, or change host networking.
+
+## Command surface
+
+```bash
+sourceosctl network doctor
+sourceosctl network plan --destination models.enterprise.example
+sourceosctl network plan --enterprise --mesh --allow-listed --destination models.enterprise.example
+sourceosctl network provider --provider-class openai-compatible --owner user
+sourceosctl network evidence inspect ./network-evidence.json
+
+sourceosctl native-assistant plan
+sourceosctl native-assistant plan --operation create-office-artifact --prompt 'draft a local report'
+sourceosctl native-assistant plan --platform cross-device --bridge-class mcp --operation handoff-to-agent-machine --allow-cross-device
+```
+
+## Boundary
+
+| Surface | Owns | Does not own |
+|---|---|---|
+| `sourceosctl network ...` | Local rendering of network/firewall/mesh/BYOM route plans and evidence-shaped summaries. | Firewall mutation, mesh installation, VPN/proxy configuration, model-provider calls, credential storage. |
+| `sourceosctl native-assistant ...` | Local rendering of native assistant bridge plans and evidence-shaped summaries. | Apple App Intents implementation, Siri invocation, Shortcuts execution, Android/Windows assistant APIs, cross-device transport. |
+
+## Policy posture
+
+- Default egress is `deny`.
+- Destination text is represented as a SHA-256 hash in route plans.
+- BYOM provider auth is always represented as a reference; credentials are never inlined.
+- Enterprise firewall rules have precedence over user allow rules.
+- User firewall profiles may be stricter than enterprise policy.
+- Mesh binding and firewall binding are complementary, not interchangeable.
+- Native assistant bridge calls are local-only by default.
+- Prompt egress is denied by default.
+- Cross-device handoff is disabled unless explicitly requested.
+- Raw app database access is denied.
+- Side effects require user confirmation in the bridge plan.
+
+## Implementation owner split
+
+| Repo | Role |
+|---|---|
+| `SourceOS-Linux/sourceos-spec` | Canonical Network/Mesh/BYOM/Native Assistant Door contracts. |
+| `SourceOS-Linux/sourceos-devtools` | Local non-mutating `sourceosctl` probe and plan surface. |
+| `SocioProphet/model-router` | Runtime route decisions for local, personal, hosted, enterprise, and BYOM model targets. |
+| `SocioProphet/agentplane` | Evidence records when network/provider/native bridge plans participate in governed runs. |
+| `SocioProphet/guardrail-fabric` | Policy decisions for prompt egress, hosted fallback, native assistant side effects, and external provider access. |
+| `SocioProphet/sociosphere` | Topology validation and cross-repo dependency direction. |
+
+## Current non-goals
+
+- Do not vendor Istio, Admiral, LuLu, Cilium, or enterprise firewalls here.
+- Do not modify host firewall state from this slice.
+- Do not install or configure mesh control planes from this slice.
+- Do not store or print provider credentials.
+- Do not invoke native assistant APIs.
+- Do not expose raw Apple Notes, Photos, mail stores, browser profiles, keychains, token stores, or security-material directories by default.
+
+## Next implementation lanes
+
+1. Add AgentPlane evidence schemas for `NetworkDoorPlanEvidence`, `ExternalModelProviderRouteEvidence`, and `NativeAssistantBridgeEvidence`.
+2. Add model-router BYOM profile consumption and policy checks against `ExternalModelProviderProfile`.
+3. Add AgentTerm `/network`, `/byom`, and `/native-assistant` event surfaces.
+4. Add Homebrew formula tests for `sourceosctl network doctor` and `sourceosctl native-assistant plan`.