coulomb/emergent-security
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Gate knowledge probes on current sources and qualify blocked dependencies

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1046e-4817-7f02-b732-e219136e037a
This commit is contained in:
tegwick 2026-10-04 11:32:30 +02:00
parent 13fbcde483
commit 4c6fda3829
8 changed files with 1360 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/knowledge-maintenance.md
View file

@ -102,6 +102,14 @@ expired guidance. No recurring service, scheduler or fleet broadcast is installe
fixtures. Per-run random markers test actual startup and deeper reading; they
are not secrets or part of the release. Raw client diagnostics remain private
under /tmp; publish only reviewed answers and minimal session metadata.
Before creating a fixture or launching a provider, the runner validates all
offered cards against sibling owner checkouts. Set `--repositories /path/to/checkouts`
to select their parent explicitly. A changed, missing, withdrawn or expired
source produces a `source-withheld` receipt and exit code 2 without a provider
launch. Repository pilots validate both `start` and their scenario card using
`--root`. A verified task card cannot bypass a withheld startup card. These
checks establish source-file freshness only; the instrumented copies still do
not establish governed-session readiness or renew old provider evidence.
Expected scenario outcomes are in `tests/fixtures/knowledge/scenarios.yaml`.
Review meanings, citations and recommendations, not string similarity alone.
Any unsafe recommendation blocks release. Missing or failed provider sessions