Commit graph

175 commits

Author SHA1 Message Date
c7dceee8e1 WIP: opt-in observed-usage settlement and run limit for spend envelopes
SpendPolicy gains optional settlement (full-hold default | observed-usage)
and max_runs, omitted from the digest when unset so existing pins hold.
Under observed-usage, completed requests charge gateway-metered cost and
runs/reconciliations charge max(metered requests, reported cost).
Not yet done: dedicated tests, owner renew envelope fields, docs, memo.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 23:36:00 +02:00
f0034f4c7e Unblock REINAH-WP-0008-T07 after T01 and T03
Some checks failed
Governed runtime contract / contract (push) Failing after 11s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 23:26:01 +02:00
b48c715e9a Add one-command owner envelope renewal (REINAH-WP-0008-T03)
Some checks failed
Governed runtime contract / contract (push) Failing after 12s
owner renew validates a settled ledger, builds the new spend policy from an
envelope file of changed fields only, retires the old ledger by rename,
initializes a fresh one at the same path and rewrites the policy and
owner.json pins. Dry run by default; prints the Secrets Engine file pins.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 23:24:24 +02:00
caaea1e90e Add free bwrap rehearsal to the owner check (REINAH-WP-0008-T01)
Some checks failed
Governed runtime contract / contract (push) Failing after 10s
metered-once --rehearse runs the admitted runtime's launchers (and claude
--version when the build declares it) inside bwrap: runtime read-only at
the mount path, no network, cleared environment, no credentials, no claim.
Fails on the deleted-build-interpreter trampoline that failed run 6efa9436;
the corrected runtime ee3d0a53 passes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 23:13:49 +02:00
2210a31d7f Route REINAH-WP-0008 decision tasks to hub decision records
Some checks failed
Governed runtime contract / contract (push) Failing after 12s
T04 a93619a9, T05 e6ca2f07, T06 e8986e40 (all open).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 23:04:05 +02:00
68e7580602 Qualify REINAH-WP-0008 wait tasks and mark it active
Some checks failed
Governed runtime contract / contract (push) Failing after 14s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 22:57:51 +02:00
custodian-sync
c009bf7440 chore(consistency): renormalize lifecycle state [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 11s
Updated by fix-consistency on 2026-10-13:
  - workplan status: ready → active

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 22:57:26 +02:00
a85de661f0 Use the registered REINAH-WP prefix; rename HARNESS-WP-0008 to REINAH-WP-0008
Some checks failed
Governed runtime contract / contract (push) Failing after 12s
AGENTS.md named HARNESS-WP- as the prefix, but the hub's canonical prefix
for this repo is REINAH-WP- (fix-consistency C-26). Hub ids are kept so
the existing record is updated, not duplicated. Also fixes the README link
to the renamed REINAH-WP-0002 file.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 22:56:46 +02:00
dd588f3e33 Add HARNESS-WP-0008: simpler metered retry
Some checks failed
Governed runtime contract / contract (push) Failing after 14s
Free host rehearsal, evidence-backed release of unused holds, and a
one-command owner renewal; multi-attempt envelopes, image shipping and
per-envelope approvals recorded as decisions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 22:52:59 +02:00
9a4469d29d Record corrected owner runtime build ee3d0a53 (REINAH-WP-0003-T05)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 22:44:09 +02:00
d897a833ba Record owner reconciliation of the 2026-09-27 held liability (REINAH-WP-0003-T05)
Some checks failed
Governed runtime contract / contract (push) Failing after 13s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 22:39:01 +02:00
5c36d80756 Import publish-grant runs locally; leave the push to Activity Core (ACTIVITY-WP-0046-T02)
Some checks failed
Governed runtime contract / contract (push) Failing after 11s
The artifact transfer now accepts a repository grant v2. It still imports
exactly one commit, refuses any changed path outside
publish_scope.path_prefixes, never pushes, and records published: false
for Activity Core's publisher (hub decision 1c9817ee).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 21:43:00 +02:00
4695649cc6 Accept repository grant v2 with publish scope (ACTIVITY-WP-0046-T02)
Some checks failed
Governed runtime contract / contract (push) Failing after 12s
Parses Activity Core's publish-capable grant: remote, branch, path
prefixes inside allowed_paths, fast-forward only. Grant id matches
activity-core 83e6446 byte for byte (test vector); v1 ids are unchanged.
Evidence adds remote, branch and fast_forward_only without raw paths.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 21:21:24 +02:00
820d33ba1e Add green-research-commit tool profile (GLAS-WP-0016-T03)
Green commit tools plus WebFetch through the sandbox proxy, for the FI
research brief Glas profile. No push, no arbitrary shell, no credentials;
granted paths stay enforced by the repository grant acceptance policy.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 21:18:06 +02:00
93a4f2c88c Record publish-scope request to activity-core (REINAH-WP-0003-T04)
Some checks failed
Governed runtime contract / contract (push) Failing after 13s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 20:55:48 +02:00
fd4d874188 Inventory assembly-checkpoint as fifth profile-absent route (REINAH-WP-0003-T04)
Some checks failed
Governed runtime contract / contract (push) Failing after 10s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
2026-10-13 20:42:40 +02:00
06bd08cfa5 Add assembly-checkpoint approach (ASSEMBLY-WP-0010)
Some checks failed
Governed runtime contract / contract (push) Failing after 10s
Executes activity-core assembly-checkpoint-* runs: fast-forward the
assembly-economics checkout, run its deterministic checkpoints/run_checkpoint.py
(data via web-fetcher, optional llm-connect assessment), commit only
checkpoints/, push fast-forward (rebase once, never force; publish grant
limited to checkpoints/), post assembly_checkpoint. Out-of-window fires are
no-ops (checkpoints/schedule.md is authoritative). Selected by label
'assembly-checkpoint'. Founder-approved 2026-10-12.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1494246@bnt-lap001
Assistant-Session: caf6de6f-f9e4-47ce-a584-49baa271fa4b
2026-10-12 18:44:33 +02:00
custodian-sync
c247165760 chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 9s
Updated by fix-consistency on 2026-10-08:
  - update .custodian-brief.md for rein-aharness

Assistant: grok
Assistant-Session: 01a11b05-37d4-7390-b2df-72297bb7ce1f
2026-10-08 12:31:16 +02:00
custodian-sync
3ae54b9f55 chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 11s
Updated by fix-consistency on 2026-10-08:
  - update .custodian-brief.md for rein-aharness

Assistant: grok
Assistant-Session: 01a11b05-37d4-7390-b2df-72297bb7ce1f
2026-10-08 12:29:09 +02:00
e5396bda51 Record fixture recovery, rate, and queue-injection evidence.
Some checks failed
Governed runtime contract / contract (push) Has been cancelled
Admission of the protected runtime still does not deploy or start a paid request. T05 stays wait on the unanswered activity-core lease expiry and a live tariff.

Assistant: grok
Assistant-Session: 01a11b05-37d4-7390-b2df-72297bb7ce1f
2026-10-08 12:28:56 +02:00
custodian-sync
795bd5ea80 chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 19s
Updated by fix-consistency on 2026-10-05:
  - update .custodian-brief.md for rein-aharness

Assistant: grok
Assistant-Session: 01a10938-ab49-7280-877a-c06f64c06ddd
2026-10-05 09:39:26 +02:00
9300354c49 Record protected-runtime admission without a deploy.
Some checks failed
Governed runtime contract / contract (push) Failing after 10s
The founder resolved e642c8e2 for the existing user systemd service.
T05 still waits on activity-core recovery, rate, and queue evidence.

Assistant: grok
Assistant-Session: 01a10938-ab49-7280-877a-c06f64c06ddd
2026-10-05 09:30:49 +02:00
bfdd364843 chore(consistency): refresh the work-record index
Some checks failed
Governed runtime contract / contract (push) Failing after 11s
Assistant: grok
Assistant-Session: 01a10938-ab49-7280-877a-c06f64c06ddd
2026-10-05 02:44:12 +02:00
custodian-sync
02350608b5 chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 10s
Updated by fix-consistency on 2026-10-05:
  - update .custodian-brief.md for rein-aharness

Assistant: grok
Assistant-Session: 01a10938-ab49-7280-877a-c06f64c06ddd
2026-10-05 02:41:18 +02:00
ee2f46ffb0 Route the protected-runtime remainder to an open decision.
Some checks failed
Governed runtime contract / contract (push) Has been cancelled
Assistant: grok
Assistant-Session: 01a10938-ab49-7280-877a-c06f64c06ddd
2026-10-05 02:39:36 +02:00
custodian-sync
4409b7e8a6 chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 23s
Updated by fix-consistency on 2026-10-04:
  - update .custodian-brief.md for rein-aharness

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10391-6355-7b41-b0fa-3e14e874f091
2026-10-04 01:04:30 +02:00
7395316ccd Minor update
Some checks failed
Governed runtime contract / contract (push) Failing after 12s
2026-10-03 00:32:07 +02:00
custodian-sync
e49462b8c8 chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 12s
Updated by fix-consistency on 2026-09-29:
  - update .custodian-brief.md for rein-aharness

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 237582@bnt-lap001
Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826
2026-09-29 21:42:31 +02:00
21e808c830 Qualify wait tasks per Task Wait Qualifiers v0.1 (CUST-WP-0074-T05, long tail)
Some checks are pending
Governed runtime contract / contract (push) Waiting to run
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 237582@bnt-lap001
Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826
2026-09-29 21:25:00 +02:00
43e621439a fix: reject broken runtime launchers and preserve failed proof evidence
Some checks failed
Governed runtime contract / contract (push) Failing after 16s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
2026-09-27 23:19:50 +02:00
4e666d6fa3 Record accepted budget and native credential review preparation
Some checks failed
Governed runtime contract / contract (push) Failing after 14s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
2026-09-27 21:18:19 +02:00
292aec9f2f Record attended native proof preparation and remaining approval gates
Some checks failed
Governed runtime contract / contract (push) Failing after 19s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
2026-09-27 19:01:36 +02:00
353554eb49 Prove installed Railiance runtime recovery under worker failures
Some checks failed
Governed runtime contract / contract (push) Failing after 18s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
2026-09-27 18:00:35 +02:00
73aaa4bcd4 Close local runtime loose ends and record external blockers
Some checks failed
Governed runtime contract / contract (push) Failing after 15s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
2026-09-27 17:46:34 +02:00
custodian-sync
e18e386e0e chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 30s
Updated by fix-consistency on 2026-09-27:
  - update .custodian-brief.md for rein-aharness

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
2026-09-27 17:45:28 +02:00
custodian-sync
4b4e9a0f7e chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 53s
Updated by fix-consistency on 2026-09-27:
  - update .custodian-brief.md for rein-aharness

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e332-3365-77c0-8491-084e9ea33ac1
2026-09-27 16:58:16 +02:00
custodian-sync
1f34e17adc chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 47s
Updated by fix-consistency on 2026-09-24:
  - update .custodian-brief.md for rein-aharness

Assistant: grok
Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f
2026-09-24 10:10:28 +02:00
87d7a4adf0 Name access-engine as the only authorization decision point.
Some checks failed
Governed runtime contract / contract (push) Has been cancelled
Assistant: grok
Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f
2026-09-24 09:56:51 +02:00
fdc07ee784 Pin glas-harness 30be818 (agent-dev-local 1.1.1, claude-sonnet-5) in the runtime contract lock
Some checks failed
Governed runtime contract / contract (push) Failing after 34s
llm-connect moves to 37436bb, a workplan-only change; its package source
is unchanged. Supports SECRETS-WP-0009-T03 / GLAS-WP-0012-T04.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 226514@bnt-lap001
Assistant-Session: 26ba103d-05fe-45a1-9cd7-9475bf239df6
2026-09-23 15:26:58 +02:00
294201a367 fi-research-brief: rebase once onto a moved origin instead of stranding briefs
Some checks failed
Governed runtime contract / contract (push) Failing after 33s
Every push from 2026-09-15 to 2026-09-22 was rejected non-fast-forward
because origin had moved; six briefs stayed local on railiance01. Per
the FI publication decision (2026-09-22), fetch, confirm that unpublished
commits touch only briefs/, rebase once and retry. Never merge or force;
a conflict aborts the rebase and fails the day.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 51320@bnt-lap001
Assistant-Session: 9d40b4c7-8e3c-42ee-b755-d658d4640d6c
2026-09-22 16:25:34 +02:00
custodian-sync
364bed78b2 chore(consistency): sync task status from DB [auto]
Some checks failed
Governed runtime contract / contract (push) Failing after 47s
Updated by fix-consistency on 2026-09-22:
  - update .custodian-brief.md for rein-aharness

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 7184@bnt-lap001
Assistant-Session: 4b436ae2-b17c-4b40-8754-200b161b26e4
2026-09-22 08:33:39 +02:00
d07b304352 AGENTS.md: fill unresolved {CREDENTIAL_ROUTING} placeholder with the credential-routing section
Some checks failed
Governed runtime contract / contract (push) Has been cancelled
statehub register left the literal token (fixed in state-hub 19450d7).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 7184@bnt-lap001
Assistant-Session: 4b436ae2-b17c-4b40-8754-200b161b26e4
2026-09-22 08:33:26 +02:00
a2149bb630 Pin sandboxer 221126c in the runtime contract lock
Some checks failed
Governed runtime contract / contract (push) Failing after 29s
Fixes the bwrap info-fd partial-read race that failed the owner runtime
proof on railiance01.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 272244@bnt-lap001
Assistant-Session: c8962fa7-b290-47df-865f-403ddb6c77e9
2026-09-22 02:34:20 +02:00
3c9e641d8e Pin glas-harness 462436b in the runtime contract lock
Some checks failed
Governed runtime contract / contract (push) Failing after 33s
Adds the harness.agent-dev-local 1.1.0 metered-owner candidate to the owner
runtime for GLAS-WP-0012-T04 / SECRETS-WP-0009-T03. No other dependency
moves; glas diff since fb57c02 is the profile, its tests and docs.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 272244@bnt-lap001
Assistant-Session: c8962fa7-b290-47df-865f-403ddb6c77e9
2026-09-22 00:13:26 +02:00
46770581a1 Classify open workplans with flavor (CUST-WP-0072).
Some checks failed
Governed runtime contract / contract (push) Failing after 25s
Set flavor on open workplans from origin/prose/status. Copy existing
depends_on aliases only. Do not promote residuals.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
2026-09-14 15:50:48 +02:00
297e41eba7 docs: cross-link ISSUE-WP-0006 on legacy issue-core poll
Some checks failed
Governed runtime contract / contract (push) Failing after 24s
REINAH-WP-0005-T06 / REIN-A-0002-T06: issue-core poll stays
legacy/external only. Counterpart workplan is ISSUE-WP-0006.

Assistant: grok
Assistant-Session: 01a09dc6-3f0d-7c93-8b11-8e83c0623d49
2026-09-14 04:53:04 +02:00
11020e8f00 Publish FI briefs to origin or fail the day
Some checks failed
Governed runtime contract / contract (push) Failing after 26s
FI-WP-0004 grants origin publication. Local commit without push no
longer posts fi_daily_brief (that cleared due while losing the file).
Prompt/context refuse re-announcing cataloged models and invented sizes.

Assistant: grok
Assistant-Session: 01a09c6a-1cfc-75b1-a78d-c13eaf22241d
2026-09-13 22:45:43 +02:00
ee3800f26d Address the pinned CLI through its namespace path in artifact proof
Some checks failed
Governed runtime contract / contract (push) Failing after 32s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
2026-09-09 23:09:30 +02:00
8a7550f2ec Pin content-verified runtime builds and isolate proof worker state
Some checks failed
Governed runtime contract / contract (push) Failing after 29s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
2026-09-09 23:03:34 +02:00
565b07716a Bootstrap one metered owner cycle against a pinned standalone runtime
Some checks failed
Governed runtime contract / contract (push) Failing after 23s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
2026-09-09 22:56:38 +02:00