Commit graph

80 commits

Author SHA1 Message Date
9fa17dd39b docs: record sandbox runtime implementation and remaining auth gates
All checks were successful
ci / validate (push) Successful in 2m34s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
2026-09-05 20:36:58 +02:00
ce37e1cb63 test: prepare real local rein acceptance with artifact verification
All checks were successful
ci / validate (push) Successful in 2m51s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
2026-09-05 19:35:18 +02:00
97daba45dd plan: define first local profile acceptance and runtime blockers
All checks were successful
ci / validate (push) Successful in 1m17s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
2026-09-05 19:23:50 +02:00
custodian-sync
74e8fd8aac chore(consistency): sync task status from DB [auto]
Some checks failed
ci / validate (push) Failing after 1m59s
Updated by fix-consistency on 2026-09-05:
  - update .custodian-brief.md for glas-harness

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
2026-09-05 19:22:29 +02:00
63a7f9f160 fix: execute local reins through the sandbox owner
Some checks failed
ci / validate (push) Has been cancelled
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
2026-09-05 19:16:22 +02:00
custodian-sync
92392f75f1 chore(consistency): sync task status from DB [auto]
All checks were successful
ci / validate (push) Successful in 3m21s
Updated by fix-consistency on 2026-09-05:
  - update .custodian-brief.md for glas-harness

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
2026-09-05 18:46:26 +02:00
02b29af9ca fix(workplans): declare type: workplan on records the hub already holds
All checks were successful
ci / validate (push) Successful in 1m16s
These files carried no type field at all. Selection is by 'type: workplan', so
they were invisible to every projection while the hub held a record for each —
and a forge-derived reset read those correct records as no longer deriving and
queued them for retirement.

Only the type line is added.

Refs STATE-WP-0083-T05

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
2026-08-26 20:56:02 +02:00
ad7f775926 chore(consistency): refresh work-record index
All checks were successful
ci / validate (push) Successful in 4m6s
Refs CUST-WP-0068-T03

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
2026-08-25 22:43:13 +02:00
baeadb6b23 fix(workplans): move work-record identifiers onto the repository prefix
Some checks failed
ci / validate (push) Has been cancelled
Identifiers predating the PREFIX-WP-NNNN convention were rejected by the canon
registry, so none of this repository's work records could be registered.

One prefix per repository (ADR-007). Existing conforming identifiers keep their
numbers where possible; the pre-convention records take the next free numbers
rather than renumbering work that was already correct.

Projection UUIDs are re-derived from the new canonical ids (ADR-007 decision 2).
Nothing was registered on central under the old identifiers, so no hub record is
orphaned by this.

Refs CUST-WP-0068-T03

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
2026-08-25 22:41:31 +02:00
1c657af28d fix(workplans): adopt ADR-007 derived identifiers
All checks were successful
ci / validate (push) Successful in 5m6s
Records absent from central carried random pre-ADR-007 identifiers minted by
the retired local hub, which C-06 refused as stale references. Deriving from
the canonical record id takes no identity from anything.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
2026-08-25 19:30:12 +02:00
a95691b0ac docs(agents): repoint remote State Hub URL to the in-cluster address
All checks were successful
ci / validate (push) Successful in 2m6s
The remote row pointed at 127.0.0.1:18000, a reverse tunnel back to the
workstation. On railiance01 the State Hub runs in the cluster on that same
machine, so the request left the box and came back to reach a local service.

Refs CUST-WP-0067-T07

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
2026-08-25 00:21:01 +02:00
repo-manager
6bd2e10e6b chore(registrar): assign State Hub identifiers
All checks were successful
ci / validate (push) Successful in 1m15s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 12:54:19 +02:00
695438019c Harden SSH and profile resolution boundaries
Some checks failed
ci / validate (push) Has been cancelled
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 12:53:05 +02:00
repo-manager
60564fda68 chore(registrar): assign State Hub identifiers
All checks were successful
ci / validate (push) Successful in 1m14s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 11:59:04 +02:00
3aabd07347 Align operational handoff instructions
All checks were successful
ci / validate (push) Successful in 44s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 11:53:24 +02:00
repo-manager
ef245000b9 chore(registrar): assign State Hub identifiers
All checks were successful
ci / validate (push) Successful in 1m46s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 11:34:00 +02:00
cac605abd7 Make profile runtime readiness explicit
Some checks failed
ci / validate (push) Has been cancelled
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 11:32:23 +02:00
repo-manager
a224e71555 chore(registrar): assign State Hub identifiers
All checks were successful
ci / validate (push) Successful in 2m19s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 10:49:01 +02:00
13aea7ff6f docs: reconcile scope with verified capability
Some checks failed
ci / validate (push) Has been cancelled
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 10:47:02 +02:00
5bfc4a6a7d docs: record production namespace boundary proof
All checks were successful
ci / validate (push) Successful in 1m12s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 01:52:26 +02:00
repo-manager
4061ce860f chore(registrar): assign State Hub identifiers
All checks were successful
ci / validate (push) Successful in 3m49s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 01:46:52 +02:00
79bf88a3c4 fix: validate sandbox consumer actors early
Some checks failed
ci / validate (push) Has been cancelled
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-23 01:45:35 +02:00
ae2a706a68 docs: refresh sandbox owner handoff
All checks were successful
ci / validate (push) Successful in 3m20s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-22 23:56:56 +02:00
repo-manager
52f2e7cfab chore(registrar): assign State Hub identifiers
Some checks failed
ci / validate (push) Has been cancelled
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-22 23:55:42 +02:00
fc774e5e9a docs: route legacy identifier grandfathering
Some checks failed
ci / validate (push) Has been cancelled
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-22 23:54:29 +02:00
repo-manager
862292486d chore(registrar): assign State Hub identifiers
Some checks failed
ci / validate (push) Has been cancelled
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-22 23:53:48 +02:00
custodian-sync
8dab6e423a chore(consistency): sync task status from DB [auto]
Some checks failed
ci / validate (push) Has been cancelled
Updated by fix-consistency on 2026-08-22:
  - update .custodian-brief.md for glas-harness

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b
2026-08-22 23:53:46 +02:00
3cb53ab310 docs: record green hardening CI [skip ci] 2026-08-21 10:59:17 +02:00
994b2daf1f test: isolate git identity in CI
All checks were successful
ci / validate (push) Successful in 2m3s
2026-08-21 10:56:14 +02:00
5c9724de45 chore: record sandbox hardening gate
Some checks failed
ci / validate (push) Failing after 2m48s
2026-08-21 10:41:29 +02:00
f773b5c101 fix: enforce sandbox execution boundary
Some checks failed
ci / validate (push) Has been cancelled
2026-08-21 10:40:29 +02:00
1cd890d871 feat: add versioned execution profiles
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-08-21 00:21:53 +02:00
641e85f5a8 A list of kings names
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-08-20 16:50:00 +02:00
8ac14dcf32 Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Maintainer decision, 2026-07-29: adopts TRSL V1C1 as this repo's
preliminary governing license, per target-revenue's
workplans/TREV-WP-0008-governance-and-pilot-rollout.md T05. Full
specialist legal review is deferred until out of beta (target-revenue
SCOPE.md §1). No Phase is yet declared for this repo.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-30 00:17:57 +02:00
3649b2c167 Regenerate WORK-RECORDS.md
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-27 02:04:11 +02:00
f65260e9e3 Mark GLAS-0001 bootstrap workplan finished
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-27 02:02:49 +02:00
custodian-sync
22f510ec8d chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-27:
  - update .custodian-brief.md for glas-harness
2026-07-27 02:01:18 +02:00
e574562b74 Mark GLAS-WP-0001/0002/0003 finished
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-27 02:01:05 +02:00
dbc7025c4d Regenerate WORK-RECORDS.md
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-27 01:53:56 +02:00
custodian-sync
fb727f7fbe chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-27:
  - update .custodian-brief.md for glas-harness
2026-07-27 01:53:23 +02:00
17adfe4d64 Close GLAS-WP-0002-T02: live OpenBao verification succeeded for real
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
ops-mason built the real AppRole/policy/KV path infrastructure, the
founder completed provisioning, and a real task ran through
rein-openweights with OPENROUTER_API_KEY explicitly unset -- real
AppRole login, real KV v2 read, real OpenRouter call, real commit. Full
build record (including two real bugs found and fixed along the way)
in ops-mason/plans/rein-openweights-openrouter-approle.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-27 01:53:06 +02:00
9cc2683cd3 Regenerate WORK-RECORDS.md
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-26 22:42:22 +02:00
custodian-sync
30bc59b9d5 chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-26:
  - update .custodian-brief.md for glas-harness
2026-07-26 22:42:09 +02:00
d3130162b1 Formalize the CLI as the first Channel extension (GLAS-WP-0003)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
channels/base.py: GatewayInvocation dataclass + Channel ABC
(parse_invocation/render_result), mirroring Rein one layer up -- a
channel turns an external invocation into what run_task_through_rein
needs, and turns its result back into whatever the invocation medium
expects.

channels/cli_channel.py: CLIChannel, a pure refactor of what cli.py did
inline -- argparse Namespace -> GatewayInvocation, result dict ->
json.dumps(..., indent=2). cli.py's run handler is now a thin
construct-parse-invoke-render wrapper.

docs/channel-contract.md documents the pattern and sketches (without
building) a second channel.

Found and fixed a real bug while live-testing this refactor:
ReinAharness's default cli_bin was still "agent-harness", stale from
before HARNESS-WP-0002-T02's rename.

4 new tests (27/27 passing), plus a real live run through
python3 -m glas_harness.cli against rein-aharness/real Claude Code
confirming identical output shape and a real commit.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-26 22:41:51 +02:00
custodian-sync
a87b924126 chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-26:
  - update .custodian-brief.md for glas-harness
2026-07-26 20:24:01 +02:00
aaf8cc5f7a Scope first channel extension as GLAS-WP-0003, closing GLAS-WP-0002-T04
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
GLAS-WP-0002 is now fully done (4/4): formalize the CLI as the first
Channel extension (contract + refactor + tests + second-channel
documentation), not building a second channel yet -- same
generalize-from-a-real-second-example discipline as ADR-002/ADR-004.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-26 20:23:48 +02:00
custodian-sync
8309c32a1b chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-26:
  - update .custodian-brief.md for glas-harness
2026-07-26 20:23:10 +02:00
custodian-sync
6bac3c19e1 chore(consistency): renormalize lifecycle state [auto]
Updated by fix-consistency on 2026-07-26:
  - workplan status: proposed → active
2026-07-26 20:23:06 +02:00
9bbff9d336 ADR-004: composable reins as middleware stays deferred (GLAS-WP-0002-T01)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Checked ADR-002 part 2's deferred question against the two observability
additions that landed since (rein-aharness's tool-event stream,
glas-harness's own gateway hub event) -- both turned out simpler as
direct implementations, neither needed a wrapping middleware layer.
Still zero real candidates for that shape. docs/harness-contract.md
gains the Middleware ABC as a documented, unimplemented sketch for if a
real third case ever appears -- no code written now.

Also flagged GLAS-WP-0002-T02 (live OpenBao verification) as blocked:
`bao token lookup` from this workstation returns 403, no usable vault
session to provision a new AppRole with. Needs the operator.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-26 20:22:55 +02:00
custodian-sync
ab66230c0f chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-26:
  - update .custodian-brief.md for glas-harness
2026-07-26 20:20:32 +02:00