glas-harness/workplans/GLAS-WP-0016-fi-research-brief-profile.md

id	type	title	domain	repo	status	flavor	owner	topic_slug	created	updated	state_hub_workstream_id
GLAS-WP-0016	workplan	Versioned Glas profile for the FI daily research brief	infotech	glas-harness	blocked	implementation	claude	fi-research-brief-profile	2026-10-13	2026-10-13	1254b220-fd97-5c84-a0e0-ef2de10972c4

FI daily research brief profile

Request: freedom-intelligence message c7f2df46 (FI-WP-0005-T05, 2026-09-22) asks for harness.fi-research-brief@1.0.0. FI's profile-absent routing expires 2026-12-31; FI-WP-0005-T07 wires the canary only after a positive sandboxed proof run. Owner declaration: freedom-intelligence/activity-definitions/fi-daily-research-brief.declaration.yaml. Egress list: freedom-intelligence/docs/sources-egress.yaml (17 hosts, :443). Publication design: docs/publish-grant-design.md.

Add the Glas profile harness.fi-research-brief@1.0.0

id: GLAS-WP-0016-T01
status: done
priority: high
state_hub_task_id: "e49776ae-a28a-527f-aece-1f08a05c044a"

Add profiles/harness.fi-research-brief.yaml: rein-aharness, session_style unattended, model_class frontier, model pinned by Glas (same pin as harness.agent-dev-local 1.1.1 unless the operator chooses otherwise), limits timeout 1800s / max_turns 60, max_budget_usd inside an accepted spend envelope, sandbox profile from T02, tool profile from T03, documented rollback pin. operational_readiness.status: unverified until T04 passes. Catalog validation (glas-harness profiles) and tests must pass. Depends on T02/T03 names being agreed, not on their release.

2026-10-13: added profiles/harness.fi-research-brief.yaml with readiness blocked (runs refuse before sandbox creation) until T02/T03 land; catalog snapshot test updated, 139 tests pass. Readiness moved to unverified after T02 and T03 landed (2026-10-13).

Add the sand-boxer egress sandbox profile

id: GLAS-WP-0016-T02
status: done
priority: high
state_hub_task_id: "d79ad740-eec6-5e93-9d90-49475982a900"

Owner: sand-boxer. Request a bwrap profile (working name profile.bwrap-fi-research) with network.default: deny and network.egress equal to the model route plus exactly the 17 hosts in FI's sources-egress.yaml, per sand-boxer/docs/bwrap-egress.md (exact lowercase DNS names, :443, no wildcards or IP literals). Owner config allowed_egress must be a superset. Glas sends the handoff and records the owner's return. Handoff sent 2026-10-13 as message 744aa305. Delivered in sand-boxer 4cffd7d (reply a49bf85c): profiles/profile.bwrap-fi-research.yaml, egress api.anthropic.com:443 plus exactly FI's 17 hosts (verified 2026-10-13).

Add the rein-aharness research tool profile

id: GLAS-WP-0016-T03
status: done
priority: high
state_hub_task_id: "cd49e97f-13f4-5563-a7cf-68f7a138bd85"

Owner: rein-aharness. Request a tool profile (working name green-research-commit): read/edit tools, HTTPS fetch through the sandbox proxy, git add/commit/status/log/diff limited to granted paths (briefs/**), no push and no arbitrary shell. Publication is not part of the tool profile; it is the deterministic publisher step in docs/publish-grant-design.md. Handoff sent 2026-10-13 as message 229b603e. Delivered in rein-aharness 820d33b (reply c35bffde): green-commit-only plus WebFetch through the sandbox proxy; briefs/** is enforced by the run's repository-grant acceptance policy, not by the tool profile.

Prove one sandboxed run and mark the profile ready

id: GLAS-WP-0016-T04
status: wait
depends_on: [SAND-WP-0015-T04]
blocked_on: message-from:rein-aharness
priority: high
blocking_reason: "Live activation needs sand-boxer owner credential delivery (SAND-WP-0015-T04); publication needs the rein-aharness publisher (decision c6f23433, request 780c78d1)."
state_hub_task_id: "6faf1b1c-164d-5d6d-8dad-6cf920a5fd6c"

Run one bounded brief through the profile inside the sandbox: egress limited to the declared hosts, exactly one new file under briefs/, one commit, no push from the session. Publish evidence under docs/evidence/, then set operational_readiness.status: ready and notify FI for FI-WP-0005-T07.

Operator decision: owner of the publish-grant publisher

id: GLAS-WP-0016-T05
status: done
needs_human: true
decision_id: 1c9817ee-95da-4165-985e-43fa61ec4827
priority: high
blocking_reason: "Operator decision: which subsystem owns the deterministic publisher (recommendation: Activity Core)."
state_hub_task_id: "e91fa370-236e-56c8-b88d-3272aec40dc1"

docs/publish-grant-design.md defines one path-scoped publish grant for FI and assembly-checkpoint. Open: who owns the publisher step and its push credentials. Recommendation: Activity Core. Resolve before T04 publishes.

2026-10-13: resolved by the operator (decision 1c9817ee): Activity Core owns the publisher and push credentials. activity-core notified (message 25824c97). activity-core declined (5961c59d, outside its charter). Superseded by decision c6f23433: rein-aharness owns the publisher as a separately granted capability; requested in reply 780c78d1. FI and assembly-economics informed.

Operator decision: is a sandboxed pinned agent a host installation?

id: GLAS-WP-0016-T06
status: done
needs_human: true
decision_id: ab16cacd-9739-4080-a55e-b6e8ab8f33e7
priority: high
blocking_reason: "Operator decision on FI's playbook question; FI decides its rhythm on that basis."
state_hub_task_id: "d1584459-dd09-5f60-b298-0c56c2a300b0"

FI's playbook forbids installing Claude Code / Codex on railiance01 for this rhythm. Question: does a pinned agent executable that runs only inside the Glas bwrap sandbox count as a host installation? Glas view: no. The binary is a pinned runtime artifact owned by rein-aharness/sand-boxer, not on the host PATH, not user-installed, carries no host credentials and runs only under deny-default egress. Answer FI explicitly once the operator decides.

2026-10-13: resolved by the operator (decision ab16cacd): not a host installation. FI answered explicitly (reply e12edd5b).