coulomb/glas-harness
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: reconcile scope with current profile and owner evidence
All checks were successful
ci / validate (push) Successful in 1m8s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181
This commit is contained in:
tegwick 2026-10-19 11:25:05 +02:00
parent c8751c9798
commit 9ddf99c59c
1 changed files with 14 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

22
SCOPE.md
View file

@ -1,7 +1,7 @@
# SCOPE
Assessed 2026-09-06 against source revision `5867842` and the recorded owner
proofs. Detailed comparison: [scope versus intent assessment](history/2026-09-06-102533-scope-vs-intent-assessment.md).
Catalog and dependency evidence refreshed 2026-10-19. The original source
assessment is retained as a historical baseline. Detailed comparison: [scope versus intent assessment](history/2026-09-06-102533-scope-vs-intent-assessment.md).
## Current product
@ -70,9 +70,9 @@ universal redaction guarantee for arbitrary caller/provider data.
|---|---|---|
| Catalog and adapters | 129 tests passed after GLAS-WP-0014; packaged catalog validation passed | Tests do not prove provider authentication or deployed runtime readiness |
| Same-host owner boundary | Non-secret live proof: source absent, mutation denied, sandbox-only commit, private task removal and workspace destruction | Deterministic dispatch, not a real model session |
| Standalone runtime and private state | Owner proof of rein CLI startup with pinned read-only Python runtime and private HOME/XDG/TMP state | Temporary proof artifact; pinned Claude executable and production selection still pending |
| Standalone runtime and private state | Pinned Claude/rein startup and protected local artifact proofs; later owner runtime and isolated integration preparation recorded in GLAS-WP-0012 | Startup and isolated fixture proofs do not establish acceptance of the actual interactive Custodian assignment |
| Provider egress | Owner extension and persisted-manager proofs of provider TLS reachability, undeclared host/direct-IP denial and cleanup | Destination control, not HTTP-path or TLS-SNI filtering; not a complete real-rein proof |
| Credential transport | Owner synthetic-key proof of delivery, redaction, next-command absence, wrong-project denial and teardown | Real Anthropic lane inactive; custody metadata confirmation does not verify its value or provider authentication |
| Credential transport | Synthetic delivery/redaction/teardown proofs; GLAS-WP-0012 records September 27 native lane activation and revocation | Historical lane activation is not current authorization or a passing combined interactive run |
| Remote SSH | Construction, quoting and refusal tests | No positive post-hardening live execution proof |
| Tool visibility | Claude stream events parsed after subprocess completion when enabled; open-weight events unavailable | No live gateway event stream or complete cross-rein tool audit |
@ -88,14 +88,20 @@ sandbox-contained execution.
| Profile | Rein | Readiness |
|---|---|---|
| `harness.agent-dev-local@1.0.0` | rein-aharness / Claude Code | `blocked` |
| `harness.agent-dev-local@1.1.0` | rein-aharness / Claude Code | `blocked` |
| `harness.agent-dev-local@1.1.1` | rein-aharness / Claude Code | `unverified` |
| `harness.fi-research-brief@1.0.0` | rein-aharness / Claude Code | `unverified` |
| `harness.agent-dev-openweights-local@1.0.0` | rein-openweights / OpenRouter | `blocked` |
| `harness.agent-dev@1.0.0` | rein-aharness / remote agent-dev | `unverified` |
The first local Claude acceptance is tracked by `GLAS-WP-0012`. Authorization
contract resolution and policy publication have progressed upstream, but real
owner verification, service deployment/identity, lane activation, runtime
pinning and combined acceptance remain gates. No readiness promotion follows
from those partial proofs.
and runtime owner evidence has progressed upstream; consult the dated returns
in that workplan instead of inferring missing implementation from the old
September baseline. Exact owner admission, active native approvals and combined
acceptance remain gates. The FI profile has sandbox and tool profiles, with its
remaining acceptance in `GLAS-WP-0016-T04`. No readiness promotion follows
from those partial proofs. The October 16 workload-only credential transport
change is a prepared Custodian bundle, not canonical Glas capability.
## Ownership boundaries