coulomb/glas-harness
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

GLAS-WP-0016/0017: record operator decisions on publisher, host install and assembly shape
Some checks failed
ci / validate (push) Failing after 3m13s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269924@bnt-lap001
Assistant-Session: 02bbdd77-e96c-4580-8952-f4dc9d8a8508
This commit is contained in:
tegwick 2026-10-13 21:18:42 +02:00
parent 95c36b2c96
commit 0bc83070f5
3 changed files with 23 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

11
docs/publish-grant-design.md
View file

@ -1,6 +1,7 @@
# Path-scoped publish grants
Status: proposed (GLAS-WP-0016-T05, 2026-10-13). One design for every tenant
Status: accepted 2026-10-13 (operator decision 1c9817ee: Activity Core owns
the publisher). One design for every tenant
that publishes a governed run's commit to its own remote. First consumers:
freedom-intelligence daily brief (`briefs/**`) and assembly-economics
checkpoints (`checkpoints/**`).
@ -48,11 +49,11 @@ capability.
Glas profile) hands its commits to the same publisher under the same grant
shape. Assembly-checkpoint does not need an agent session for this.
## Open: who owns the publisher
## Publisher owner
The publisher is one capability serving both Glas-profiled and blueprint runs.
Candidates: Activity Core (it already holds the grant and ops_run), rein-aharness
(it runs the worker that imports the bundle), or a separate typed capability.
Recommendation: Activity Core, because it validates and holds the grant, and
both execution paths already pass through it. This is the operator's decision,
tracked as GLAS-WP-0016-T05.
Decided 2026-10-13 (hub decision 1c9817ee): Activity Core, because it
validates and holds the grant, and both execution paths already pass through
it.