From 9ddf99c59c0e30207c606bfc308f85cc737a7f83 Mon Sep 17 00:00:00 2001 From: tegwick Date: Mon, 19 Oct 2026 11:25:05 +0200 Subject: [PATCH] docs: reconcile scope with current profile and owner evidence Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181 --- SCOPE.md | 22 ++++++++++++++-------- 1 file changed, 14 insertions(+), 8 deletions(-) diff --git a/SCOPE.md b/SCOPE.md index 68dc4bd..c4e6c25 100644 --- a/SCOPE.md +++ b/SCOPE.md @@ -1,7 +1,7 @@ # SCOPE -Assessed 2026-09-06 against source revision `5867842` and the recorded owner -proofs. Detailed comparison: [scope versus intent assessment](history/2026-09-06-102533-scope-vs-intent-assessment.md). +Catalog and dependency evidence refreshed 2026-10-19. The original source +assessment is retained as a historical baseline. Detailed comparison: [scope versus intent assessment](history/2026-09-06-102533-scope-vs-intent-assessment.md). ## Current product @@ -70,9 +70,9 @@ universal redaction guarantee for arbitrary caller/provider data. |---|---|---| | Catalog and adapters | 129 tests passed after GLAS-WP-0014; packaged catalog validation passed | Tests do not prove provider authentication or deployed runtime readiness | | Same-host owner boundary | Non-secret live proof: source absent, mutation denied, sandbox-only commit, private task removal and workspace destruction | Deterministic dispatch, not a real model session | -| Standalone runtime and private state | Owner proof of rein CLI startup with pinned read-only Python runtime and private HOME/XDG/TMP state | Temporary proof artifact; pinned Claude executable and production selection still pending | +| Standalone runtime and private state | Pinned Claude/rein startup and protected local artifact proofs; later owner runtime and isolated integration preparation recorded in GLAS-WP-0012 | Startup and isolated fixture proofs do not establish acceptance of the actual interactive Custodian assignment | | Provider egress | Owner extension and persisted-manager proofs of provider TLS reachability, undeclared host/direct-IP denial and cleanup | Destination control, not HTTP-path or TLS-SNI filtering; not a complete real-rein proof | -| Credential transport | Owner synthetic-key proof of delivery, redaction, next-command absence, wrong-project denial and teardown | Real Anthropic lane inactive; custody metadata confirmation does not verify its value or provider authentication | +| Credential transport | Synthetic delivery/redaction/teardown proofs; GLAS-WP-0012 records September 27 native lane activation and revocation | Historical lane activation is not current authorization or a passing combined interactive run | | Remote SSH | Construction, quoting and refusal tests | No positive post-hardening live execution proof | | Tool visibility | Claude stream events parsed after subprocess completion when enabled; open-weight events unavailable | No live gateway event stream or complete cross-rein tool audit | @@ -88,14 +88,20 @@ sandbox-contained execution. | Profile | Rein | Readiness | |---|---|---| | `harness.agent-dev-local@1.0.0` | rein-aharness / Claude Code | `blocked` | +| `harness.agent-dev-local@1.1.0` | rein-aharness / Claude Code | `blocked` | +| `harness.agent-dev-local@1.1.1` | rein-aharness / Claude Code | `unverified` | +| `harness.fi-research-brief@1.0.0` | rein-aharness / Claude Code | `unverified` | | `harness.agent-dev-openweights-local@1.0.0` | rein-openweights / OpenRouter | `blocked` | | `harness.agent-dev@1.0.0` | rein-aharness / remote agent-dev | `unverified` | The first local Claude acceptance is tracked by `GLAS-WP-0012`. Authorization -contract resolution and policy publication have progressed upstream, but real -owner verification, service deployment/identity, lane activation, runtime -pinning and combined acceptance remain gates. No readiness promotion follows -from those partial proofs. +and runtime owner evidence has progressed upstream; consult the dated returns +in that workplan instead of inferring missing implementation from the old +September baseline. Exact owner admission, active native approvals and combined +acceptance remain gates. The FI profile has sandbox and tool profiles, with its +remaining acceptance in `GLAS-WP-0016-T04`. No readiness promotion follows +from those partial proofs. The October 16 workload-only credential transport +change is a prepared Custodian bundle, not canonical Glas capability. ## Ownership boundaries