coulomb/glas-harness
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

GLAS-WP-0016-T02: record sand-boxer egress profile, FI profile readiness unverified
All checks were successful
ci / validate (push) Successful in 1m21s
Details

Browse source 
sand-boxer 4cffd7d adds profile.bwrap-fi-research with exactly FI's 17 hosts
plus the model route. With sandbox and tool profiles in place the profile
moves from blocked to unverified; T04 waits on SAND-WP-0015-T04 and the
rein-aharness publisher.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269924@bnt-lap001
Assistant-Session: 02bbdd77-e96c-4580-8952-f4dc9d8a8508
This commit is contained in:
tegwick 2026-10-13 22:52:12 +02:00
parent aa0b22d28a
commit 7b1557ba14
3 changed files with 13 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

5
profiles/harness.fi-research-brief.yaml
View file

@ -3,8 +3,8 @@ version: "1.0.0"
contract_version: "1.0" contract_version: "1.0"
status: enabled status: enabled
operational_readiness: operational_readiness:
status: blocked status: unverified
reason: sandbox profile profile.bwrap-fi-research (sand-boxer) does not exist yet; no sandboxed proof run reason: sandbox profile (sand-boxer 4cffd7d) and tool profile (rein-aharness 820d33b) exist; no sandboxed proof run yet; live activation depends on SAND-WP-0015-T04 and the rein-aharness publisher
owner: glas-harness owner: glas-harness
evidence_ref: GLAS-WP-0016-T04 evidence_ref: GLAS-WP-0016-T04
rein: rein:
@ -35,6 +35,7 @@ metadata:
# freedom-intelligence/docs/sources-egress.yaml (GLAS-WP-0016-T02). # freedom-intelligence/docs/sources-egress.yaml (GLAS-WP-0016-T02).
# The session writes and commits only under briefs/** and never pushes; # The session writes and commits only under briefs/** and never pushes;
# publication is the deterministic publisher in docs/publish-grant-design.md. # publication is the deterministic publisher in docs/publish-grant-design.md.
# Sandbox profile.bwrap-fi-research: sand-boxer 4cffd7d (18 egress hosts).
# Tool profile green-research-commit: rein-aharness 820d33b. # Tool profile green-research-commit: rein-aharness 820d33b.
# Model pin and max_budget_usd follow harness.agent-dev-local 1.1.1 # Model pin and max_budget_usd follow harness.agent-dev-local 1.1.1
# (envelope hfact-glas-anthropic-2026-09). Readiness moves to unverified when # (envelope hfact-glas-anthropic-2026-09). Readiness moves to unverified when

2
tests/test_profiles.py
View file

@ -81,7 +81,7 @@ def test_committed_catalog_resolves_both_constellations() -> None:
("harness.agent-dev-local", "1.1.1", "unverified"), ("harness.agent-dev-local", "1.1.1", "unverified"),
("harness.agent-dev-openweights-local", "1.0.0", "blocked"), ("harness.agent-dev-openweights-local", "1.0.0", "blocked"),
("harness.agent-dev", "1.0.0", "unverified"), ("harness.agent-dev", "1.0.0", "unverified"),
("harness.fi-research-brief", "1.0.0", "blocked"), ("harness.fi-research-brief", "1.0.0", "unverified"),
} }
profile, descriptor = catalog.resolve( profile, descriptor = catalog.resolve(
"harness.agent-dev-openweights-local@1.0.0" "harness.agent-dev-openweights-local@1.0.0"

16
workplans/GLAS-WP-0016-fi-research-brief-profile.md
View file

@ -43,15 +43,14 @@ names being agreed, not on their release.
2026-10-13: added `profiles/harness.fi-research-brief.yaml` with readiness 2026-10-13: added `profiles/harness.fi-research-brief.yaml` with readiness
`blocked` (runs refuse before sandbox creation) until T02/T03 land; catalog `blocked` (runs refuse before sandbox creation) until T02/T03 land; catalog
snapshot test updated, 139 tests pass. snapshot test updated, 139 tests pass. Readiness moved to `unverified` after
T02 and T03 landed (2026-10-13).
## Add the sand-boxer egress sandbox profile ## Add the sand-boxer egress sandbox profile
```task ```task
id: GLAS-WP-0016-T02 id: GLAS-WP-0016-T02
status: wait status: done
blocked_on: message-from:sand-boxer
blocking_reason: "Handoff 744aa305 sent 2026-10-13; await sand-boxer profile.bwrap-fi-research."
priority: high priority: high
state_hub_task_id: "d79ad740-eec6-5e93-9d90-49475982a900" state_hub_task_id: "d79ad740-eec6-5e93-9d90-49475982a900"
``` ```
@ -62,7 +61,9 @@ equal to the model route plus exactly the 17 hosts in FI's
`sources-egress.yaml`, per `sand-boxer/docs/bwrap-egress.md` (exact lowercase `sources-egress.yaml`, per `sand-boxer/docs/bwrap-egress.md` (exact lowercase
DNS names, :443, no wildcards or IP literals). Owner config `allowed_egress` DNS names, :443, no wildcards or IP literals). Owner config `allowed_egress`
must be a superset. Glas sends the handoff and records the owner's return. must be a superset. Glas sends the handoff and records the owner's return.
Handoff sent 2026-10-13 as message 744aa305. Handoff sent 2026-10-13 as message 744aa305. Delivered in sand-boxer 4cffd7d
(reply a49bf85c): `profiles/profile.bwrap-fi-research.yaml`, egress
`api.anthropic.com:443` plus exactly FI's 17 hosts (verified 2026-10-13).
## Add the rein-aharness research tool profile ## Add the rein-aharness research tool profile
@ -88,9 +89,10 @@ not by the tool profile.
```task ```task
id: GLAS-WP-0016-T04 id: GLAS-WP-0016-T04
status: wait status: wait
depends_on: [GLAS-WP-0016-T02, GLAS-WP-0016-T03, GLAS-WP-0016-T05] depends_on: [SAND-WP-0015-T04]
blocked_on: message-from:rein-aharness
priority: high priority: high
blocking_reason: "Depends on T02 (sand-boxer egress profile) and the rein-aharness publisher (decision c6f23433)." blocking_reason: "Live activation needs sand-boxer owner credential delivery (SAND-WP-0015-T04); publication needs the rein-aharness publisher (decision c6f23433, request 780c78d1)."
state_hub_task_id: "6faf1b1c-164d-5d6d-8dad-6cf920a5fd6c" state_hub_task_id: "6faf1b1c-164d-5d6d-8dad-6cf920a5fd6c"
``` ```