coulomb/glas-harness
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

GLAS-WP-0016/0017: record operator decisions on publisher, host install and assembly shape
Some checks failed
ci / validate (push) Failing after 3m13s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269924@bnt-lap001
Assistant-Session: 02bbdd77-e96c-4580-8952-f4dc9d8a8508
This commit is contained in:
tegwick 2026-10-13 21:18:42 +02:00
parent 95c36b2c96
commit 0bc83070f5
3 changed files with 23 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

11
docs/publish-grant-design.md
View file

@ -1,6 +1,7 @@
# Path-scoped publish grants # Path-scoped publish grants
Status: proposed (GLAS-WP-0016-T05, 2026-10-13). One design for every tenant Status: accepted 2026-10-13 (operator decision 1c9817ee: Activity Core owns
the publisher). One design for every tenant
that publishes a governed run's commit to its own remote. First consumers: that publishes a governed run's commit to its own remote. First consumers:
freedom-intelligence daily brief (`briefs/**`) and assembly-economics freedom-intelligence daily brief (`briefs/**`) and assembly-economics
checkpoints (`checkpoints/**`). checkpoints (`checkpoints/**`).
@ -48,11 +49,11 @@ capability.
Glas profile) hands its commits to the same publisher under the same grant Glas profile) hands its commits to the same publisher under the same grant
shape. Assembly-checkpoint does not need an agent session for this. shape. Assembly-checkpoint does not need an agent session for this.
## Open: who owns the publisher ## Publisher owner
The publisher is one capability serving both Glas-profiled and blueprint runs. The publisher is one capability serving both Glas-profiled and blueprint runs.
Candidates: Activity Core (it already holds the grant and ops_run), rein-aharness Candidates: Activity Core (it already holds the grant and ops_run), rein-aharness
(it runs the worker that imports the bundle), or a separate typed capability. (it runs the worker that imports the bundle), or a separate typed capability.
Recommendation: Activity Core, because it validates and holds the grant, and Decided 2026-10-13 (hub decision 1c9817ee): Activity Core, because it
both execution paths already pass through it. This is the operator's decision, validates and holds the grant, and both execution paths already pass through
tracked as GLAS-WP-0016-T05. it.

12
workplans/GLAS-WP-0016-fi-research-brief-profile.md
View file

@ -89,7 +89,7 @@ id: GLAS-WP-0016-T04
status: wait status: wait
depends_on: [GLAS-WP-0016-T02, GLAS-WP-0016-T03, GLAS-WP-0016-T05] depends_on: [GLAS-WP-0016-T02, GLAS-WP-0016-T03, GLAS-WP-0016-T05]
priority: high priority: high
blocking_reason: "Depends on T01-T03 and on the publisher owner (T05)." blocking_reason: "Depends on T02/T03 (owner handoffs); publisher owner decided (T05)."
state_hub_task_id: "6faf1b1c-164d-5d6d-8dad-6cf920a5fd6c" state_hub_task_id: "6faf1b1c-164d-5d6d-8dad-6cf920a5fd6c"
``` ```
@ -102,7 +102,7 @@ push from the session. Publish evidence under `docs/evidence/`, then set
```task ```task
id: GLAS-WP-0016-T05 id: GLAS-WP-0016-T05
status: wait status: done
needs_human: true needs_human: true
decision_id: 1c9817ee-95da-4165-985e-43fa61ec4827 decision_id: 1c9817ee-95da-4165-985e-43fa61ec4827
priority: high priority: high
@ -114,11 +114,14 @@ state_hub_task_id: "e91fa370-236e-56c8-b88d-3272aec40dc1"
assembly-checkpoint. Open: who owns the publisher step and its push assembly-checkpoint. Open: who owns the publisher step and its push
credentials. Recommendation: Activity Core. Resolve before T04 publishes. credentials. Recommendation: Activity Core. Resolve before T04 publishes.
2026-10-13: resolved by the operator (decision 1c9817ee): Activity Core owns
the publisher and push credentials. activity-core notified (message 25824c97).
## Operator decision: is a sandboxed pinned agent a host installation? ## Operator decision: is a sandboxed pinned agent a host installation?
```task ```task
id: GLAS-WP-0016-T06 id: GLAS-WP-0016-T06
status: wait status: done
needs_human: true needs_human: true
decision_id: ab16cacd-9739-4080-a55e-b6e8ab8f33e7 decision_id: ab16cacd-9739-4080-a55e-b6e8ab8f33e7
priority: high priority: high
@ -132,3 +135,6 @@ bwrap sandbox count as a host installation? Glas view: no. The binary is a
pinned runtime artifact owned by rein-aharness/sand-boxer, not on the host PATH, pinned runtime artifact owned by rein-aharness/sand-boxer, not on the host PATH,
not user-installed, carries no host credentials and runs only under deny-default not user-installed, carries no host credentials and runs only under deny-default
egress. Answer FI explicitly once the operator decides. egress. Answer FI explicitly once the operator decides.
2026-10-13: resolved by the operator (decision ab16cacd): not a host
installation. FI answered explicitly (reply e12edd5b).

10
workplans/GLAS-WP-0017-assembly-checkpoint-governed-route.md
View file

@ -24,7 +24,7 @@ route by 2026-12-15, ahead of the 2026-12-31 compatibility flag.
```task ```task
id: GLAS-WP-0017-T01 id: GLAS-WP-0017-T01
status: wait status: done
needs_human: true needs_human: true
decision_id: 0636c577-46e2-4dca-b68e-0b189c967cae decision_id: 0636c577-46e2-4dca-b68e-0b189c967cae
priority: high priority: high
@ -40,6 +40,9 @@ Glas profile for both. Glas recommendation: (a), matching rein-aharness
assessment becomes an agent loop. Publication uses the shared grant in assessment becomes an agent loop. Publication uses the shared grant in
`docs/publish-grant-design.md` either way. `docs/publish-grant-design.md` either way.
2026-10-13: resolved by the operator (decision 0636c577): option (a).
assembly-economics answered (reply 2b8b3553).
## Confirm the grant shape with assembly-economics ## Confirm the grant shape with assembly-economics
```task ```task
@ -47,10 +50,13 @@ id: GLAS-WP-0017-T02
status: wait status: wait
depends_on: [GLAS-WP-0017-T01, GLAS-WP-0016-T05] depends_on: [GLAS-WP-0017-T01, GLAS-WP-0016-T05]
priority: medium priority: medium
blocking_reason: "Depends on T01 and GLAS-WP-0016-T05 (publisher owner)." blocked_on: message-from:assembly-economics
blocking_reason: "Grant-shape confirmation requested 2026-10-13 (reply 2b8b3553); await assembly-economics."
state_hub_task_id: "04c50300-5c7a-556f-81d7-11060c5a22b0" state_hub_task_id: "04c50300-5c7a-556f-81d7-11060c5a22b0"
``` ```
Once the decisions land, confirm with assembly-economics a `repository_grant` Once the decisions land, confirm with assembly-economics a `repository_grant`
v2 block (`allowed_paths: [checkpoints/**]`, fast-forward only, one rebase, v2 block (`allowed_paths: [checkpoints/**]`, fast-forward only, one rebase,
never force) in its activity definition, copied from the FI template. never force) in its activity definition, copied from the FI template.
Requested 2026-10-13 in reply 2b8b3553; publisher owner is Activity Core.