View-Only Mode in GRC
summary
GRC gains a View-Only mode that opens untrusted flowgraphs without executing parameter expressions, using saved evaluated values instead of running code and showing a prompt when values are missing. The UI supplies an expression overview showing non-literals (including block template expressions), lets users trust once or forever per file or directory, and blocks modifications until trust is granted. Implementation is in a GitHub pull request from Google Summer of Code work, it functions in the demo, and a few small tweaks remain.
AI-written summary · about
chapters (8)
- 0:00View-Only Mode in GRC
- 3:56Security risks of flow graphs
- 5:20How View-Only Mode protects
- 6:46Trusted vs untrusted actions
- 8:30Expression overview for security
- 10:58Managing trusted flow graphs
- 11:20How View-Only Mode works
- 13:23Call to action and summary
related talks
32mGRC Engineering - Bringing GRC to a repository near you
15mGive me 15 minutes & I'll change your view of GDB
20mVaporview - 2026 updates
23mAn Implementation of a Visual Stepper in the GRASP Programming System
51mMake Quality Executable: Verification Gates for Agentic Engineering at Scale
28mBPF Verifier Visualizer
21mLive Verification in an Interactive Proof Assistant
46mWhat's next for the Groovy web console?