coulomb/glas-harness
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

GLAS-WP-0016-T02: record sand-boxer egress profile, FI profile readiness unverified
All checks were successful
ci / validate (push) Successful in 1m21s
Details

Browse source 
sand-boxer 4cffd7d adds profile.bwrap-fi-research with exactly FI's 17 hosts
plus the model route. With sandbox and tool profiles in place the profile
moves from blocked to unverified; T04 waits on SAND-WP-0015-T04 and the
rein-aharness publisher.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269924@bnt-lap001
Assistant-Session: 02bbdd77-e96c-4580-8952-f4dc9d8a8508
This commit is contained in:
tegwick 2026-10-13 22:52:12 +02:00
parent aa0b22d28a
commit 7b1557ba14
3 changed files with 13 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

16
workplans/GLAS-WP-0016-fi-research-brief-profile.md
View file

@ -43,15 +43,14 @@ names being agreed, not on their release.
2026-10-13: added `profiles/harness.fi-research-brief.yaml` with readiness
`blocked` (runs refuse before sandbox creation) until T02/T03 land; catalog
snapshot test updated, 139 tests pass.
snapshot test updated, 139 tests pass. Readiness moved to `unverified` after
T02 and T03 landed (2026-10-13).
## Add the sand-boxer egress sandbox profile
```task
id: GLAS-WP-0016-T02
status: wait
blocked_on: message-from:sand-boxer
blocking_reason: "Handoff 744aa305 sent 2026-10-13; await sand-boxer profile.bwrap-fi-research."
status: done
priority: high
state_hub_task_id: "d79ad740-eec6-5e93-9d90-49475982a900"
```
@ -62,7 +61,9 @@ equal to the model route plus exactly the 17 hosts in FI's
`sources-egress.yaml`, per `sand-boxer/docs/bwrap-egress.md` (exact lowercase
DNS names, :443, no wildcards or IP literals). Owner config `allowed_egress`
must be a superset. Glas sends the handoff and records the owner's return.
Handoff sent 2026-10-13 as message 744aa305.
Handoff sent 2026-10-13 as message 744aa305. Delivered in sand-boxer 4cffd7d
(reply a49bf85c): `profiles/profile.bwrap-fi-research.yaml`, egress
`api.anthropic.com:443` plus exactly FI's 17 hosts (verified 2026-10-13).
## Add the rein-aharness research tool profile
@ -88,9 +89,10 @@ not by the tool profile.
```task
id: GLAS-WP-0016-T04
status: wait
depends_on: [GLAS-WP-0016-T02, GLAS-WP-0016-T03, GLAS-WP-0016-T05]
depends_on: [SAND-WP-0015-T04]
blocked_on: message-from:rein-aharness
priority: high
blocking_reason: "Depends on T02 (sand-boxer egress profile) and the rein-aharness publisher (decision c6f23433)."
blocking_reason: "Live activation needs sand-boxer owner credential delivery (SAND-WP-0015-T04); publication needs the rein-aharness publisher (decision c6f23433, request 780c78d1)."
state_hub_task_id: "6faf1b1c-164d-5d6d-8dad-6cf920a5fd6c"
```