coulomb/glas-harness
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record pinned Claude runtime startup and owner handoff
All checks were successful
ci / validate (push) Successful in 2m53s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
This commit is contained in:
tegwick 2026-09-06 23:52:48 +02:00
parent 74a6071e84
commit 57b98df52c
5 changed files with 157 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
workplans/GLAS-WP-0012-first-local-profile-production-proof.md
View file

@ -326,3 +326,22 @@ verified, approval release published and pinned, audit T03 complete, dedicated
PDP revision 3 enforces adopted short-lived caller identity. See GLAS-WP-0015
and its evidence receipts. T02 remains wait until remaining owner admission and
runtime gates are verified; no real model run or readiness promotion.
## Pinned Claude startup progress — 2026-09-06
Advanced sand-boxer SAND-WP-0015-T05 independently of custody: runtime builder
now copies only an explicitly digest-pinned native Claude executable. Selected
installed Claude 2.1.263, binary digest
26d020351e8112f4006790f3cfce43b4c9df0c1bb1d0e542364d64151b81d5ba;
complete candidate runtime digest
5cf9a16c5d77a16bdb2cb5b3df06ea655356bc2d44741791e3fedfee20d7e922.
Sandbox f8821ec2 passed actual Claude --version, rein CLI/import, read-only
runtime, private HOME/state persistence, source absence, clean tree and teardown
with owner proxy environment present. Lint and all 175 sand-boxer tests pass.
Evidence: docs/evidence/GLAS-WP-0015-claude-startup-2026-09-06.json.
This resolves candidate binary pin/startup, not protected runtime deployment,
Claude provider-request compatibility, credential delivery or a real model run.
The candidate is in /tmp; no production profile readiness changed. Existing
credential and acceptance tasks remain open. No new owner replies at session start.

19
workplans/GLAS-WP-0015-production-dependency-coordination.md
View file

@ -159,3 +159,22 @@ issued-token expiry and fresh-token recovery. Temporary forward removed and
proof process exited. Final owner receipt deliveries recorded in
`docs/production-caller-access-receipts-2026-09-06.json`. This establishes the
operator path; consumer adoption and native action authorization remain open.
## Pinned Claude startup progress — 2026-09-06
Advanced sand-boxer SAND-WP-0015-T05 independently of custody: runtime builder
now copies only an explicitly digest-pinned native Claude executable. Selected
installed Claude 2.1.263, binary digest
26d020351e8112f4006790f3cfce43b4c9df0c1bb1d0e542364d64151b81d5ba;
complete candidate runtime digest
5cf9a16c5d77a16bdb2cb5b3df06ea655356bc2d44741791e3fedfee20d7e922.
Sandbox f8821ec2 passed actual Claude --version, rein CLI/import, read-only
runtime, private HOME/state persistence, source absence, clean tree and teardown
with owner proxy environment present. Lint and all 175 sand-boxer tests pass.
Evidence: docs/evidence/GLAS-WP-0015-claude-startup-2026-09-06.json.
This resolves candidate binary pin/startup, not protected runtime deployment,
Claude provider-request compatibility, credential delivery or a real model run.
The candidate is in /tmp; no production profile readiness changed. Existing
credential and acceptance tasks remain open. No new owner replies at session start.